Skip to content
OpenAdvisories

Package · Ubuntu

bundler

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2016-7954

    Bundler allows attacker to inject arbitrary code via secondary Gem source

    Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

    bundler bundler Ubuntu RubyGems