CVE-2019-3881

RubyGems/bundler CVE-2019-3881: high 7

Insecure path handling in Bundler

Action: Upgrade bundler to 2.1.0 or later.

bundle update bundler

Affected

Fixed versions

Sources

• osv: GHSA-g98m-96g9-wfjq
• https://nvd.nist.gov/vuln/detail/CVE-2019-3881
• https://github.com/rubygems/bundler/issues/6501
• https://github.com/rubygems/bundler/pull/7416/commits/65cfebb041c454c246aaf32a177b0243915a9998
• https://bugzilla.redhat.com/show_bug.cgi?id=1651826
• https://github.com/advisories/GHSA-g98m-96g9-wfjq
• https://github.com/rubygems/bundler
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bundler/CVE-2019-3881.yml

CVE-2019-3881 · published 2021-05-10T14:53:59Z · modified 2024-02-16T08:22:47.202315Z · JSON