CVE-2016-7954

Published: Dec 22, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

Affected (183)

Products: Bundler: Bundler

Bundler

1 product

Bundler

Configuration A

183 vulnerable

Vulnerable Software	Affected Versions
Bundler Bundler	Version 1.0.0
Bundler Bundler	Version 1.0.0 beta10
Bundler Bundler	Version 1.0.0 beta1
Bundler Bundler	Version 1.0.0 beta6
Bundler Bundler	Version 1.0.0 beta7
Bundler Bundler	Version 1.0.0 beta8
Bundler Bundler	Version 1.0.0 beta9
Bundler Bundler	Version 1.0.0 rc1
Bundler Bundler	Version 1.0.0 rc2
Bundler Bundler	Version 1.0.0 rc3
Bundler Bundler	Version 1.0.0 rc4
Bundler Bundler	Version 1.0.0 rc5
Bundler Bundler	Version 1.0.0 rc6
Bundler Bundler	Version 1.0.10
Bundler Bundler	Version 1.0.11
Bundler Bundler	Version 1.0.12
Bundler Bundler	Version 1.0.13
Bundler Bundler	Version 1.0.14
Bundler Bundler	Version 1.0.15
Bundler Bundler	Version 1.0.16
Bundler Bundler	Version 1.0.17
Bundler Bundler	Version 1.0.18
Bundler Bundler	Version 1.0.19 rc
Bundler Bundler	Version 1.0.1
Bundler Bundler	Version 1.0.20
Bundler Bundler	Version 1.0.20 rc
Bundler Bundler	Version 1.0.21
Bundler Bundler	Version 1.0.21 rc
Bundler Bundler	Version 1.0.2
Bundler Bundler	Version 1.0.3
Bundler Bundler	Version 1.0.4
Bundler Bundler	Version 1.0.5
Bundler Bundler	Version 1.0.6
Bundler Bundler	Version 1.0.7
Bundler Bundler	Version 1.0.8
Bundler Bundler	Version 1.0.9
Bundler Bundler	Version 1.1.0
Bundler Bundler	Version 1.1.1
Bundler Bundler	Version 1.1.2
Bundler Bundler	Version 1.1.3
Bundler Bundler	Version 1.1.4
Bundler Bundler	Version 1.1.5
Bundler Bundler	Version 1.10.0
Bundler Bundler	Version 1.10.0 pre1
Bundler Bundler	Version 1.10.0 pre2
Bundler Bundler	Version 1.10.0 pre
Bundler Bundler	Version 1.10.0 rc
Bundler Bundler	Version 1.10.1
Bundler Bundler	Version 1.10.2
Bundler Bundler	Version 1.10.3
Bundler Bundler	Version 1.10.4
Bundler Bundler	Version 1.10.5
Bundler Bundler	Version 1.10.6
Bundler Bundler	Version 1.11.0
Bundler Bundler	Version 1.11.0 pre1
Bundler Bundler	Version 1.11.0 pre2
Bundler Bundler	Version 1.11.1
Bundler Bundler	Version 1.11.2
Bundler Bundler	Version 1.12.0
Bundler Bundler	Version 1.12.0 pre1
Bundler Bundler	Version 1.12.0 pre2
Bundler Bundler	Version 1.12.0 rc2
Bundler Bundler	Version 1.12.0 rc3
Bundler Bundler	Version 1.12.0 rc4
Bundler Bundler	Version 1.12.0 rc
Bundler Bundler	Version 1.12.1
Bundler Bundler	Version 1.12.2
Bundler Bundler	Version 1.12.3
Bundler Bundler	Version 1.12.4
Bundler Bundler	Version 1.12.5
Bundler Bundler	Version 1.12.6
Bundler Bundler	Version 1.13.0
Bundler Bundler	Version 1.13.0 pre1
Bundler Bundler	Version 1.13.0 rc1
Bundler Bundler	Version 1.13.0 rc2
Bundler Bundler	Version 1.13.1
Bundler Bundler	Version 1.13.2
Bundler Bundler	Version 1.13.3
Bundler Bundler	Version 1.13.4
Bundler Bundler	Version 1.13.5
Bundler Bundler	Version 1.13.6
Bundler Bundler	Version 1.1 pre10
Bundler Bundler	Version 1.1 pre1
Bundler Bundler	Version 1.1 pre2
Bundler Bundler	Version 1.1 pre3
Bundler Bundler	Version 1.1 pre4
Bundler Bundler	Version 1.1 pre5
Bundler Bundler	Version 1.1 pre6
Bundler Bundler	Version 1.1 pre7
Bundler Bundler	Version 1.1 pre8
Bundler Bundler	Version 1.1 pre9
Bundler Bundler	Version 1.1 pre
Bundler Bundler	Version 1.1 rc2
Bundler Bundler	Version 1.1 rc3
Bundler Bundler	Version 1.1 rc4
Bundler Bundler	Version 1.1 rc5
Bundler Bundler	Version 1.1 rc6
Bundler Bundler	Version 1.1 rc7
Bundler Bundler	Version 1.1 rc8
Bundler Bundler	Version 1.1 rc
Bundler Bundler	Version 1.2.0
Bundler Bundler	Version 1.2.0 pre1
Bundler Bundler	Version 1.2.0 pre
Bundler Bundler	Version 1.2.0 rc2
Bundler Bundler	Version 1.2.0 rc
Bundler Bundler	Version 1.2.1
Bundler Bundler	Version 1.2.2
Bundler Bundler	Version 1.2.3
Bundler Bundler	Version 1.2.4
Bundler Bundler	Version 1.2.5
Bundler Bundler	Version 1.3.0
Bundler Bundler	Version 1.3.0 pre2
Bundler Bundler	Version 1.3.0 pre3
Bundler Bundler	Version 1.3.0 pre4
Bundler Bundler	Version 1.3.0 pre5
Bundler Bundler	Version 1.3.0 pre6
Bundler Bundler	Version 1.3.0 pre7
Bundler Bundler	Version 1.3.0 pre8
Bundler Bundler	Version 1.3.0 pre
Bundler Bundler	Version 1.3.1
Bundler Bundler	Version 1.3.2
Bundler Bundler	Version 1.3.3
Bundler Bundler	Version 1.3.4
Bundler Bundler	Version 1.3.5
Bundler Bundler	Version 1.3.6
Bundler Bundler	Version 1.4.0 pre1
Bundler Bundler	Version 1.4.0 rc1
Bundler Bundler	Version 1.5.0
Bundler Bundler	Version 1.5.0 rc1
Bundler Bundler	Version 1.5.0 rc2
Bundler Bundler	Version 1.5.1
Bundler Bundler	Version 1.5.2
Bundler Bundler	Version 1.5.3
Bundler Bundler	Version 1.6.0
Bundler Bundler	Version 1.6.1
Bundler Bundler	Version 1.6.2
Bundler Bundler	Version 1.6.3
Bundler Bundler	Version 1.6.4
Bundler Bundler	Version 1.6.5
Bundler Bundler	Version 1.6.6
Bundler Bundler	Version 1.6.7
Bundler Bundler	Version 1.7.0
Bundler Bundler	Version 1.7.10
Bundler Bundler	Version 1.7.11
Bundler Bundler	Version 1.7.12
Bundler Bundler	Version 1.7.13
Bundler Bundler	Version 1.7.14
Bundler Bundler	Version 1.7.15
Bundler Bundler	Version 1.7.1
Bundler Bundler	Version 1.7.2
Bundler Bundler	Version 1.7.3
Bundler Bundler	Version 1.7.4
Bundler Bundler	Version 1.7.5
Bundler Bundler	Version 1.7.6
Bundler Bundler	Version 1.7.7
Bundler Bundler	Version 1.7.8
Bundler Bundler	Version 1.7.9
Bundler Bundler	Version 1.8.0
Bundler Bundler	Version 1.8.0 pre
Bundler Bundler	Version 1.8.0 rc
Bundler Bundler	Version 1.8.1
Bundler Bundler	Version 1.8.2
Bundler Bundler	Version 1.8.3
Bundler Bundler	Version 1.8.4
Bundler Bundler	Version 1.8.5
Bundler Bundler	Version 1.8.6
Bundler Bundler	Version 1.8.7
Bundler Bundler	Version 1.8.8
Bundler Bundler	Version 1.8.9
Bundler Bundler	Version 1.9.0
Bundler Bundler	Version 1.9.0 pre1
Bundler Bundler	Version 1.9.0 pre
Bundler Bundler	Version 1.9.0 rc
Bundler Bundler	Version 1.9.10
Bundler Bundler	Version 1.9.1
Bundler Bundler	Version 1.9.2
Bundler Bundler	Version 1.9.3
Bundler Bundler	Version 1.9.4
Bundler Bundler	Version 1.9.5
Bundler Bundler	Version 1.9.6
Bundler Bundler	Version 1.9.7
Bundler Bundler	Version 1.9.8
Bundler Bundler	Version 1.9.9