Search for packages
Package details: pkg:gem/bundler@2.2.10
purl pkg:gem/bundler@2.2.10
Next non-vulnerable version 2.2.33
Latest non-vulnerable version 2.2.33
Risk 4.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6t9d-2n3y-nbgv
Aliases:
CVE-2020-36327
GHSA-fp4w-jxhp-m23p
insufficient validation
2.2.16
Affected by 1 other vulnerability.
2.2.18
Affected by 1 other vulnerability.
VCID-hk69-vd9p-wfb3
Aliases:
CVE-2021-43809
GHSA-fj7f-vq84-fh43
arbitrary command execution
2.2.33
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6t9d-2n3y-nbgv insufficient validation CVE-2020-36327
GHSA-fp4w-jxhp-m23p

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T18:07:47.553463+00:00 GitLab Importer Affected by VCID-hk69-vd9p-wfb3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2021-43809.yml 37.0.0
2025-07-03T17:58:54.011096+00:00 GitLab Importer Affected by VCID-6t9d-2n3y-nbgv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2020-36327.yml 37.0.0
2025-07-03T16:51:56.344372+00:00 GHSA Importer Fixing VCID-6t9d-2n3y-nbgv https://github.com/advisories/GHSA-fp4w-jxhp-m23p 37.0.0
2025-07-01T16:58:14.856880+00:00 Ruby Importer Fixing VCID-6t9d-2n3y-nbgv https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bundler/CVE-2020-36327.yml 36.1.3
2025-07-01T12:20:36.800169+00:00 GithubOSV Importer Fixing VCID-6t9d-2n3y-nbgv https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/05/GHSA-fp4w-jxhp-m23p/GHSA-fp4w-jxhp-m23p.json 36.1.3