CVE-2019-14281: Datagrid Project Datagrid

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

Affected products

• Datagrid Project Datagrid: version 1.0.6 only

Published 2019-07-26. Last modified 2026-06-17.