Contents

---
gem: omniauth_amazon
cve: 2019-15224
ghsa: 333g-rpr4-7hxq
url: https://github.com/rubygems.org/issues/2097
date: 2019-08-20
title: Code execution backdoor in omniauth_amazon
description: |-
  The omniauth_amazon gem 1.0.1 for Ruby, as distributed on RubyGems.org, included a
  code-execution backdoor inserted by a third party.

  Users of an affected version should consider downgrading to the last non-affected version of
  1.0.1.
unaffected_versions:
  - "< 1.0.1"
  - "> 1.0.1"
related:
  url:
    - https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/omniauth_amazon/CVE-2019-15224.yml