Skip to content
OpenAdvisories

Package · Alpine

ruby-bundler

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.7
    CVE-2021-43809

    Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile

    `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and apparently harmless `Gemfile`'s, it is not expected that they lead to execution of external code, unless that's explicit…

    rubygems rubygems rubygems bundler Debian Ubuntu Alpine RubyGems