bundler

RubyGems · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.CVE-2021-43809 · GHSA-FJ7F-VQ84-FH43	Red Hat Enterprise Linux 7/rubygem-bundler Red Hat Enterprise Linux 8/ruby:3.0/ruby	Red HatRubyGems	Medium	Fix reported	2026-07-08
Bundler allows attacker to inject arbitrary code via secondary Gem sourceCVE-2016-7954 · GHSA-JVGM-PFQV-887X	Red Hat Enterprise Linux 7/rubygem-bundler Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)/rubygem-bundler	Red HatRubyGems	Critical	Fix reported	2025-04-15
Bundler may install gems from a different source than expectedCVE-2013-0334 · GHSA-49JX-9CMC-XJXM	CloudForms Management Engine 5/ruby193-rubygem-bundler OpenShift Enterprise 1/ruby193-rubygem-bundler	Red HatRubyGems	Medium	Fix reported	2024-12-06
Dependency Confusion in BundlerCVE-2020-36327 · GHSA-FP4W-JXHP-M23P	CloudForms Management Engine 5/rubygem-bundler Logging Subsystem for Red Hat OpenShift/ruby	Red HatRubyGems	High	Fix reported	2024-12-05
Insecure path handling in BundlerCVE-2019-3881 · GHSA-G98M-96G9-WFJQ	Red Hat 3scale API Management Platform 2/backend Red Hat Enterprise Linux 8/ruby:2.5/rubygem-bundler	Red HatRubyGems	High	Fix reported	2024-02-16