Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.3 CVE-2021-43809 `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and apparently…

Bundler 2.2.33+ Fix from $1,9502021-12-08 HIGH 8.8 CVE-2020-36327EPSS 6% Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means tha…

Bundler 2.2.10+ Fix from $1,9502021-04-29 HIGH 7.8 CVE-2019-3881 Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the use…

Bundler 2.1.0+ Fix from $1,9502020-09-04 CRITICAL 9.8 CVE-2016-7954EPSS 8% Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. … Bundler Patch available Fix from $2,3002016-12-22 MEDIUM 5.0 CVE-2013-0334 Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same …

Bundler 1.7.0+ Fix from $1,6002014-10-31