Search for packages
| purl | pkg:gem/bundler@2.1.0.pre.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6t9d-2n3y-nbgv
Aliases: CVE-2020-36327 GHSA-fp4w-jxhp-m23p |
insufficient validation |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-e1c6-7d44-gqc8
Aliases: CVE-2019-3881 GHSA-g98m-96g9-wfjq |
Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed. |
Affected by 2 other vulnerabilities. |
|
VCID-hk69-vd9p-wfb3
Aliases: CVE-2021-43809 GHSA-fj7f-vq84-fh43 |
arbitrary command execution |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-03T18:07:47.511200+00:00 | GitLab Importer | Affected by | VCID-hk69-vd9p-wfb3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2021-43809.yml | 37.0.0 |
| 2025-07-03T17:58:53.962853+00:00 | GitLab Importer | Affected by | VCID-6t9d-2n3y-nbgv | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2020-36327.yml | 37.0.0 |
| 2025-07-03T17:50:03.443283+00:00 | GitLab Importer | Affected by | VCID-e1c6-7d44-gqc8 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2019-3881.yml | 37.0.0 |
| 2025-07-03T17:03:01.337531+00:00 | GHSA Importer | Affected by | VCID-e1c6-7d44-gqc8 | https://github.com/advisories/GHSA-g98m-96g9-wfjq | 37.0.0 |