rubygems/bundler Security Advisories | GitStock

critical2022-05-14

Bundler allows attacker to inject arbitrary code via secondary Gem source

GHSA-jvgm-pfqv-887x · CVE-2016-7954

medium2022-05-05

Bundler may install gems from a different source than expected

GHSA-49jx-9cmc-xjxm · CVE-2013-0334

high2021-05-10

Insecure path handling in Bundler

GHSA-g98m-96g9-wfjq · CVE-2019-3881