2 known security vulnerabilities
- moderateGHSA-49jx-9cmc-xjxm(CVE-2013-0334)
Bundler may install gems from a different source than expected
Show 1 more vulnerabilityShow fewer vulnerabilities1 moderate
- moderateGHSA-fj7f-vq84-fh43(CVE-2021-43809)
Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.
Bundler manages an application's dependencies through its entire life, across many machines, systematically and repeatably
Required Ruby Version
None
Required Rubygems Version
>= 1.3.6
Authors
Carl Lerche, Yehuda Katz, André Arko
Versions
-
4.1.0.beta2
-
source
- 4.1.0.beta2 source October 08, 2026 (402 KB)
-
-
4.1.0.beta1
-
source
- 4.1.0.beta1 source September 09, 2026 (397 KB)
-
-
4.0.23
-
source
- 4.0.23 source October 14, 2026 (460 KB)
-
-
4.0.22
-
source
- 4.0.22 source September 30, 2026 (458 KB)
-
-
4.0.21
-
source
- 4.0.21 source September 16, 2026 (458 KB)
-
-
0.9.25
-
source
- 0.9.25 source May 03, 2010 (49.5 KB) vulnerable
-