Search for packages
Package details: pkg:gem/bundler@2.2.8
purl pkg:gem/bundler@2.2.8
Next non-vulnerable version 2.2.33
Latest non-vulnerable version 2.2.33
Risk 4.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6t9d-2n3y-nbgv
Aliases:
CVE-2020-36327
GHSA-fp4w-jxhp-m23p
insufficient validation
2.2.10
Affected by 2 other vulnerabilities.
2.2.16
Affected by 1 other vulnerability.
2.2.18
Affected by 1 other vulnerability.
VCID-hk69-vd9p-wfb3
Aliases:
CVE-2021-43809
GHSA-fj7f-vq84-fh43
arbitrary command execution
2.2.33
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T18:07:47.548064+00:00 GitLab Importer Affected by VCID-hk69-vd9p-wfb3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2021-43809.yml 37.0.0
2025-07-03T17:58:54.006479+00:00 GitLab Importer Affected by VCID-6t9d-2n3y-nbgv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bundler/CVE-2020-36327.yml 37.0.0