Read the docs
TI-2016-06685 Aliases CVE-2016-7954GHSA-jvgm-pfqv-887x

Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an…

Priority MEDIUM 53CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 7 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-94.

Summary

Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

Why it matters now

EPSS 0.08821 95th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial bundler (RubyGems): 2.0.0Red Hat: 7 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—bundler (RubyGems)1.0.0 to before 2.0.02.0.0Patch availableGHSA-jvgm-pfqv-887x
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • bundler (RubyGems) Vendor— Affected 1.0.0 to before 2.0.0 Fixed in 2.0.0 Patch available GHSA-jvgm-pfqv-887x

CPE configurations NVD · 183

CPEVersionsRoleVendor
cpe:2.3:a:bundler:bundler:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta1:*:*:*:*:*:*1.0.0 beta1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta10:*:*:*:*:*:*1.0.0 beta10VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta6:*:*:*:*:*:*1.0.0 beta6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta7:*:*:*:*:*:*1.0.0 beta7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta8:*:*:*:*:*:*1.0.0 beta8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:beta9:*:*:*:*:*:*1.0.0 beta9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:rc1:*:*:*:*:*:*1.0.0 rc1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:rc2:*:*:*:*:*:*1.0.0 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:rc3:*:*:*:*:*:*1.0.0 rc3VulnerableBundler
  • cpe:2.3:a:bundler:bundler:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta1:*:*:*:*:*:* Versions 1.0.0 beta1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta10:*:*:*:*:*:* Versions 1.0.0 beta10 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta6:*:*:*:*:*:* Versions 1.0.0 beta6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta7:*:*:*:*:*:* Versions 1.0.0 beta7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta8:*:*:*:*:*:* Versions 1.0.0 beta8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:beta9:*:*:*:*:*:* Versions 1.0.0 beta9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc1:*:*:*:*:*:* Versions 1.0.0 rc1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc2:*:*:*:*:*:* Versions 1.0.0 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc3:*:*:*:*:*:* Versions 1.0.0 rc3 Vulnerable ·Bundler
Show 173 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:bundler:bundler:1.0.0:rc4:*:*:*:*:*:*1.0.0 rc4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:rc5:*:*:*:*:*:*1.0.0 rc5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.0:rc6:*:*:*:*:*:*1.0.0 rc6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.4:*:*:*:*:*:*:*1.0.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.5:*:*:*:*:*:*:*1.0.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.6:*:*:*:*:*:*:*1.0.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.8:*:*:*:*:*:*:*1.0.8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.9:*:*:*:*:*:*:*1.0.9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.10:*:*:*:*:*:*:*1.0.10VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.11:*:*:*:*:*:*:*1.0.11VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.12:*:*:*:*:*:*:*1.0.12VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.13:*:*:*:*:*:*:*1.0.13VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.14:*:*:*:*:*:*:*1.0.14VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.15:*:*:*:*:*:*:*1.0.15VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.16:*:*:*:*:*:*:*1.0.16VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.17:*:*:*:*:*:*:*1.0.17VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.18:*:*:*:*:*:*:*1.0.18VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.19:rc:*:*:*:*:*:*1.0.19 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.20:*:*:*:*:*:*:*1.0.20VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.20:rc:*:*:*:*:*:*1.0.20 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.21:*:*:*:*:*:*:*1.0.21VulnerableBundler
cpe:2.3:a:bundler:bundler:1.0.21:rc:*:*:*:*:*:*1.0.21 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre:*:*:*:*:*:*1.1 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre1:*:*:*:*:*:*1.1 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre10:*:*:*:*:*:*1.1 pre10VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre2:*:*:*:*:*:*1.1 pre2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre3:*:*:*:*:*:*1.1 pre3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre4:*:*:*:*:*:*1.1 pre4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre5:*:*:*:*:*:*1.1 pre5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre6:*:*:*:*:*:*1.1 pre6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre7:*:*:*:*:*:*1.1 pre7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre8:*:*:*:*:*:*1.1 pre8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:pre9:*:*:*:*:*:*1.1 pre9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc:*:*:*:*:*:*1.1 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc2:*:*:*:*:*:*1.1 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc3:*:*:*:*:*:*1.1 rc3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc4:*:*:*:*:*:*1.1 rc4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc5:*:*:*:*:*:*1.1 rc5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc6:*:*:*:*:*:*1.1 rc6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc7:*:*:*:*:*:*1.1 rc7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1:rc8:*:*:*:*:*:*1.1 rc8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.1.5:*:*:*:*:*:*:*1.1.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.0:pre:*:*:*:*:*:*1.2.0 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.0:pre1:*:*:*:*:*:*1.2.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.0:rc:*:*:*:*:*:*1.2.0 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.0:rc2:*:*:*:*:*:*1.2.0 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.2.5:*:*:*:*:*:*:*1.2.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre:*:*:*:*:*:*1.3.0 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre2:*:*:*:*:*:*1.3.0 pre2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre3:*:*:*:*:*:*1.3.0 pre3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre4:*:*:*:*:*:*1.3.0 pre4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre5:*:*:*:*:*:*1.3.0 pre5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre6:*:*:*:*:*:*1.3.0 pre6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre7:*:*:*:*:*:*1.3.0 pre7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.0:pre8:*:*:*:*:*:*1.3.0 pre8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.3:*:*:*:*:*:*:*1.3.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.4:*:*:*:*:*:*:*1.3.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.5:*:*:*:*:*:*:*1.3.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.3.6:*:*:*:*:*:*:*1.3.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.4.0:pre1:*:*:*:*:*:*1.4.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.4.0:rc1:*:*:*:*:*:*1.4.0 rc1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.0:*:*:*:*:*:*:*1.5.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.0:rc1:*:*:*:*:*:*1.5.0 rc1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.0:rc2:*:*:*:*:*:*1.5.0 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.1:*:*:*:*:*:*:*1.5.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.2:*:*:*:*:*:*:*1.5.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.1:*:*:*:*:*:*:*1.7.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.2:*:*:*:*:*:*:*1.7.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.3:*:*:*:*:*:*:*1.7.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.4:*:*:*:*:*:*:*1.7.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.5:*:*:*:*:*:*:*1.7.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.6:*:*:*:*:*:*:*1.7.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.7:*:*:*:*:*:*:*1.7.7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.8:*:*:*:*:*:*:*1.7.8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.9:*:*:*:*:*:*:*1.7.9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.10:*:*:*:*:*:*:*1.7.10VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.11:*:*:*:*:*:*:*1.7.11VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.12:*:*:*:*:*:*:*1.7.12VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.13:*:*:*:*:*:*:*1.7.13VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.14:*:*:*:*:*:*:*1.7.14VulnerableBundler
cpe:2.3:a:bundler:bundler:1.7.15:*:*:*:*:*:*:*1.7.15VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.0:pre:*:*:*:*:*:*1.8.0 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.0:rc:*:*:*:*:*:*1.8.0 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.5:*:*:*:*:*:*:*1.8.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.6:*:*:*:*:*:*:*1.8.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.7:*:*:*:*:*:*:*1.8.7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.8:*:*:*:*:*:*:*1.8.8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.8.9:*:*:*:*:*:*:*1.8.9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.0:*:*:*:*:*:*:*1.9.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.0:pre:*:*:*:*:*:*1.9.0 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.0:pre1:*:*:*:*:*:*1.9.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.0:rc:*:*:*:*:*:*1.9.0 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.1:*:*:*:*:*:*:*1.9.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.2:*:*:*:*:*:*:*1.9.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.3:*:*:*:*:*:*:*1.9.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.4:*:*:*:*:*:*:*1.9.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.5:*:*:*:*:*:*:*1.9.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.6:*:*:*:*:*:*:*1.9.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.7:*:*:*:*:*:*:*1.9.7VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.8:*:*:*:*:*:*:*1.9.8VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.9:*:*:*:*:*:*:*1.9.9VulnerableBundler
cpe:2.3:a:bundler:bundler:1.9.10:*:*:*:*:*:*:*1.9.10VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.0:pre:*:*:*:*:*:*1.10.0 preVulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.0:pre1:*:*:*:*:*:*1.10.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.0:pre2:*:*:*:*:*:*1.10.0 pre2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.0:rc:*:*:*:*:*:*1.10.0 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.1:*:*:*:*:*:*:*1.10.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.2:*:*:*:*:*:*:*1.10.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.3:*:*:*:*:*:*:*1.10.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.4:*:*:*:*:*:*:*1.10.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.5:*:*:*:*:*:*:*1.10.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.10.6:*:*:*:*:*:*:*1.10.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.11.0:pre1:*:*:*:*:*:*1.11.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.11.0:pre2:*:*:*:*:*:*1.11.0 pre2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.11.1:*:*:*:*:*:*:*1.11.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.11.2:*:*:*:*:*:*:*1.11.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:*:*:*:*:*:*:*1.12.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:pre1:*:*:*:*:*:*1.12.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:pre2:*:*:*:*:*:*1.12.0 pre2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:rc:*:*:*:*:*:*1.12.0 rcVulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:rc2:*:*:*:*:*:*1.12.0 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:rc3:*:*:*:*:*:*1.12.0 rc3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.0:rc4:*:*:*:*:*:*1.12.0 rc4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.2:*:*:*:*:*:*:*1.12.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.3:*:*:*:*:*:*:*1.12.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.4:*:*:*:*:*:*:*1.12.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.5:*:*:*:*:*:*:*1.12.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.12.6:*:*:*:*:*:*:*1.12.6VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.0:*:*:*:*:*:*:*1.13.0VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.0:pre1:*:*:*:*:*:*1.13.0 pre1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.0:rc1:*:*:*:*:*:*1.13.0 rc1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.0:rc2:*:*:*:*:*:*1.13.0 rc2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.1:*:*:*:*:*:*:*1.13.1VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.2:*:*:*:*:*:*:*1.13.2VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.3:*:*:*:*:*:*:*1.13.3VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.4:*:*:*:*:*:*:*1.13.4VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.5:*:*:*:*:*:*:*1.13.5VulnerableBundler
cpe:2.3:a:bundler:bundler:1.13.6:*:*:*:*:*:*:*1.13.6VulnerableBundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc4:*:*:*:*:*:* Versions 1.0.0 rc4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc5:*:*:*:*:*:* Versions 1.0.0 rc5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.0:rc6:*:*:*:*:*:* Versions 1.0.0 rc6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.4:*:*:*:*:*:*:* Versions 1.0.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.5:*:*:*:*:*:*:* Versions 1.0.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.6:*:*:*:*:*:*:* Versions 1.0.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.9:*:*:*:*:*:*:* Versions 1.0.9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.19:rc:*:*:*:*:*:* Versions 1.0.19 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.20:rc:*:*:*:*:*:* Versions 1.0.20 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.0.21:rc:*:*:*:*:*:* Versions 1.0.21 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre:*:*:*:*:*:* Versions 1.1 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre1:*:*:*:*:*:* Versions 1.1 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre10:*:*:*:*:*:* Versions 1.1 pre10 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre2:*:*:*:*:*:* Versions 1.1 pre2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre3:*:*:*:*:*:* Versions 1.1 pre3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre4:*:*:*:*:*:* Versions 1.1 pre4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre5:*:*:*:*:*:* Versions 1.1 pre5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre6:*:*:*:*:*:* Versions 1.1 pre6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre7:*:*:*:*:*:* Versions 1.1 pre7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre8:*:*:*:*:*:* Versions 1.1 pre8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:pre9:*:*:*:*:*:* Versions 1.1 pre9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc:*:*:*:*:*:* Versions 1.1 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc2:*:*:*:*:*:* Versions 1.1 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc3:*:*:*:*:*:* Versions 1.1 rc3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc4:*:*:*:*:*:* Versions 1.1 rc4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc5:*:*:*:*:*:* Versions 1.1 rc5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc6:*:*:*:*:*:* Versions 1.1 rc6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc7:*:*:*:*:*:* Versions 1.1 rc7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1:rc8:*:*:*:*:*:* Versions 1.1 rc8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.0:pre:*:*:*:*:*:* Versions 1.2.0 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.0:pre1:*:*:*:*:*:* Versions 1.2.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.0:rc:*:*:*:*:*:* Versions 1.2.0 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.0:rc2:*:*:*:*:*:* Versions 1.2.0 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre:*:*:*:*:*:* Versions 1.3.0 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre2:*:*:*:*:*:* Versions 1.3.0 pre2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre3:*:*:*:*:*:* Versions 1.3.0 pre3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre4:*:*:*:*:*:* Versions 1.3.0 pre4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre5:*:*:*:*:*:* Versions 1.3.0 pre5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre6:*:*:*:*:*:* Versions 1.3.0 pre6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre7:*:*:*:*:*:* Versions 1.3.0 pre7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.0:pre8:*:*:*:*:*:* Versions 1.3.0 pre8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.4:*:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.5:*:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.3.6:*:*:*:*:*:*:* Versions 1.3.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.4.0:pre1:*:*:*:*:*:* Versions 1.4.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.4.0:rc1:*:*:*:*:*:* Versions 1.4.0 rc1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.0:rc1:*:*:*:*:*:* Versions 1.5.0 rc1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.0:rc2:*:*:*:*:*:* Versions 1.5.0 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.3:*:*:*:*:*:*:* Versions 1.7.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.5:*:*:*:*:*:*:* Versions 1.7.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.6:*:*:*:*:*:*:* Versions 1.7.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.7:*:*:*:*:*:*:* Versions 1.7.7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.8:*:*:*:*:*:*:* Versions 1.7.8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.9:*:*:*:*:*:*:* Versions 1.7.9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.10:*:*:*:*:*:*:* Versions 1.7.10 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.11:*:*:*:*:*:*:* Versions 1.7.11 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.12:*:*:*:*:*:*:* Versions 1.7.12 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.13:*:*:*:*:*:*:* Versions 1.7.13 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.14:*:*:*:*:*:*:* Versions 1.7.14 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.7.15:*:*:*:*:*:*:* Versions 1.7.15 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.0:pre:*:*:*:*:*:* Versions 1.8.0 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.0:rc:*:*:*:*:*:* Versions 1.8.0 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.8:*:*:*:*:*:*:* Versions 1.8.8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.8.9:*:*:*:*:*:*:* Versions 1.8.9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.0:pre:*:*:*:*:*:* Versions 1.9.0 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.0:pre1:*:*:*:*:*:* Versions 1.9.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.0:rc:*:*:*:*:*:* Versions 1.9.0 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.4:*:*:*:*:*:*:* Versions 1.9.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.5:*:*:*:*:*:*:* Versions 1.9.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.6:*:*:*:*:*:*:* Versions 1.9.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.7:*:*:*:*:*:*:* Versions 1.9.7 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.8:*:*:*:*:*:*:* Versions 1.9.8 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.9:*:*:*:*:*:*:* Versions 1.9.9 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.9.10:*:*:*:*:*:*:* Versions 1.9.10 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.0:pre:*:*:*:*:*:* Versions 1.10.0 pre Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.0:pre1:*:*:*:*:*:* Versions 1.10.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.0:pre2:*:*:*:*:*:* Versions 1.10.0 pre2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.0:rc:*:*:*:*:*:* Versions 1.10.0 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.2:*:*:*:*:*:*:* Versions 1.10.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.5:*:*:*:*:*:*:* Versions 1.10.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.10.6:*:*:*:*:*:*:* Versions 1.10.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.11.0:pre1:*:*:*:*:*:* Versions 1.11.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.11.0:pre2:*:*:*:*:*:* Versions 1.11.0 pre2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:*:*:*:*:*:*:* Versions 1.12.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:pre1:*:*:*:*:*:* Versions 1.12.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:pre2:*:*:*:*:*:* Versions 1.12.0 pre2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:rc:*:*:*:*:*:* Versions 1.12.0 rc Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:rc2:*:*:*:*:*:* Versions 1.12.0 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:rc3:*:*:*:*:*:* Versions 1.12.0 rc3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.0:rc4:*:*:*:*:*:* Versions 1.12.0 rc4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.2:*:*:*:*:*:*:* Versions 1.12.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.3:*:*:*:*:*:*:* Versions 1.12.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.4:*:*:*:*:*:*:* Versions 1.12.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.5:*:*:*:*:*:*:* Versions 1.12.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.12.6:*:*:*:*:*:*:* Versions 1.12.6 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.0:*:*:*:*:*:*:* Versions 1.13.0 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.0:pre1:*:*:*:*:*:* Versions 1.13.0 pre1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.0:rc1:*:*:*:*:*:* Versions 1.13.0 rc1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.0:rc2:*:*:*:*:*:* Versions 1.13.0 rc2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.1:*:*:*:*:*:*:* Versions 1.13.1 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.2:*:*:*:*:*:*:* Versions 1.13.2 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.3:*:*:*:*:*:*:* Versions 1.13.3 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.5:*:*:*:*:*:*:* Versions 1.13.5 Vulnerable ·Bundler
  • cpe:2.3:a:bundler:bundler:1.13.6:*:*:*:*:*:*:* Versions 1.13.6 Vulnerable ·Bundler

Remediation

  • Fix · GHSA-jvgm-pfqv-887x bundler (RubyGems) Fixed in 2.0.0 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)AffectedNo fix planned: Will not fix
Red Hat OpenShift Enterprise 2AffectedNo fix planned: Will not fix
Red Hat Satellite 6AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix planned: Will not fix
Red Hat Subscription Asset ManagerAffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-7954
  2. 2026-10-03 Alias added: GHSA-jvgm-pfqv-887x
  3. 2026-10-12 EPSS moved to the 95th–99th percentile

References

Exploit 1

Patch 2

Advisory 4

Other 6

  • TI-2020-18610 Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency… CVSS 3.1HIGH 8.8
  • TI-2021-19615 Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile CVSS 3.1HIGH 7.3
  • TI-2019-02891 Uncontrolled search path in rubygem-bundler CVSS 3.1HIGH 7.8
  • TI-2013-00264 Bundler before 1.7, when multiple top-level source lines are used, allows remote… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences