bundler vulnerabilities (RubyGems)

5 vulnerabilities.

• bundler RubyGems Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile CVE-2021-43809 Fix available 6.7 MediumDecember 8, 2021
• bundler RubyGems Dependency Confusion in Bundler CVE-2020-36327 Fix available 8.8 HighApril 29, 2021
• bundler RubyGems Insecure path handling in Bundler CVE-2019-3881 Fix available 7.8 HighJune 9, 2020
• bundler RubyGems Bundler allows attacker to inject arbitrary code via secondary Gem source CVE-2016-7954 Fix available 9.8 CriticalDecember 22, 2016
• bundler RubyGems Bundler may install gems from a different source than expected CVE-2013-0334 Fix available 5.0 MediumOctober 31, 2014