https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:36:45.301369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-104665 EUVD-2026-104665 2026-10-06T15:36:45.402614+00:00 EUVD-2026-104665 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0334 fkie_cve-2013-0334 2026-10-06T15:36:45.402653+00:00

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

 https://cve.radiocsirt.org/vuln/ghsa-49jx-9cmc-xjxm GHSA-49jx-9cmc-xjxm — Bundler may install gems from a different source than expected 2026-10-06T15:36:45.402692+00:00

Affected: RubyGems: bundler

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

 https://cve.radiocsirt.org/vuln/gsd-2013-0334 gsd-2013-0334 2026-10-06T15:36:45.402715+00:00 gsd-2013-0334 https://cve.radiocsirt.org/vuln/rhsa-2015:2180 RHSA-2015:2180 — Red Hat Security Advisory: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update 2026-10-06T15:36:45.402728+00:00

rubygem-bundler: 'bundle install' may install a gem from a source other than expected

 https://cve.radiocsirt.org/vuln/suse-su-2015:0795-1 SUSE-SU-2015:0795-1 — Security update for rubygem-bundler 2026-10-06T15:36:45.402748+00:00

Security update for rubygem-bundler

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0334 Withdrawn: UBUNTU-CVE-2013-0334 2026-10-06T15:36:45.402763+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: bundler

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.