PT-2016-3337

Name of the Vulnerable Software and Affected Versions Bundler versions 1.x Description The issue is related to a gem name collision on a secondary source, which could allow remote attackers to inject arbitrary Ruby code into an application. This might lead to unauthorized access to confidential...