Bundler vulnerabilities

Products

• Bundler 5

Newest

• bundler, rubygems +1 more Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile CVE-2021-43809 Fix available 6.7 MediumDecember 8, 2021
• bundler, fedoraproject fedora, microsoft package manager configurations +2 more Dependency Confusion in Bundler CVE-2020-36327 Fix available 8.8 HighApril 29, 2021
• bundler Insecure path handling in Bundler CVE-2019-3881 Fix available 7.8 HighJune 9, 2020
• bundler Bundler allows attacker to inject arbitrary code via secondary Gem source CVE-2016-7954 Fix available 9.8 CriticalDecember 22, 2016
• bundler, fedoraproject fedora, opensuse +2 more Bundler may install gems from a different source than expected CVE-2013-0334 Fix available 5.0 MediumOctober 31, 2014