Malicious code in monosize-bundler-rsbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf3c7a4c6dc1fa0209d4cadd6a45eabab92db8a49425e91ec6083e4d9cfaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sentry-bundler-plugin-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f46a47bc2b07ff75d14f1b6152b8663f7e39ad961b754ee7de5c8e8f390c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TencentOS Server 3: rubygem-bundler (TSSA-2022:0191)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0191 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

rubygem-bundler: unexpected code execution in Gemfiles

Bundler is a package for managing application dependencies in Ruby. In bundler versions before 2.2.33, when working with untrusted and apparently harmless Gemfile's, it is not expected that they lead to execution of external code, unless that's explicit in the ruby code inside the Gemfile itself...

openSUSE Security Advisory (SUSE-SU-2025:1294-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:1294-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rubygem-bundler (SUSE-SU-2025:1294-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1294-1 advisory. - CVE-2020-36327: Fixed bundler choosing a dependency source based on the highest gem version number, whi...

Security update for rubygem-bundler

This update for rubygem-bundler fixes the following issues: CVE-2020-36327: Fixed bundler choosing a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen bsc1185842 Other fixes: - Updated to version 2.2.34 Patch...

SUSE-SU-2025:1294-1 Security update for rubygem-bundler

This update for rubygem-bundler fixes the following issues: - CVE-2020-36327: Fixed bundler choosing a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen bsc1185842 Other fixes: - Updated to version 2.2.34...

Malicious code in paymaster-bundler-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976dfeb2cefe9c3b2fc6b0da31c62937a4bdbaabc387c7f16ce1a86e2b872e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2186 Malicious code in paymaster-bundler-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976dfeb2cefe9c3b2fc6b0da31c62937a4bdbaabc387c7f16ce1a86e2b872e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2020-36327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue g...

Linux Distros Unpatched Vulnerability : CVE-2021-43809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bundler is a package for managing application dependencies in Ruby. In bundler versions before 2.2.33, when working with untrusted and apparently harmless...

Linux Distros Unpatched Vulnerability : CVE-2024-43788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packagi...

MAL-2025-2129 Malicious code in sol-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bsc-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d03484f0d23a8270e14878fbc772aa9463ff4c69612a411ca078c52e1b19b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2016-7954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this...

Linux Distros Unpatched Vulnerability : CVE-2019-3881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home...

SUSE CVE-2024-47068

Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta e.g., import.meta.url in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting...