rubygems/bundler

Releases296

Frequency3 weeks 6 days

Last Release over 6 years ago

Stars4.88K

Manage your Ruby application's gem dependencies

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2016-7954 ↗	Dec 22, 2016Thursday, 22 December 2016, 22:59	—	7.5 HIGH
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.