Lucene search
+L

1 matches found

OSV
OSV
added 2021/12/23 9:1 p.m.6 views

MGASA-2021-0579 Updated ruby packages fix security vulnerability

Bundler sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application...

9.8CVSS7.1AI score0.06307EPSS
SaveExploits6References10
Rows per page
Query Builder