Skip to content
OpenAdvisories

Package · RubyGems

bundler

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2021-43809

    Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile

    `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and apparently harmless `Gemfile`'s, it is not expected that they lead to execution of external code, unless that's explicit…

    rubygems rubygems rubygems bundler Debian Ubuntu Alpine RubyGems
  • Medium —
    CVE-2013-0334

    Bundler may install gems from a different source than expected

    Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

    bundler RubyGems