Known vulnerabilities in rubygem-bundler

Vendor: openEuler
Software: rubygem-bundler
Software CPE: cpe:2.3:o:openeuler:rubygem-bundler:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-bundler rubygem-bundler is affected by 17 known vulnerabilities: 2 high, 11 medium, 4 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145888 - Resource exhaustion
CVE-2026-80212		 CWE-400 Medium
No
No
 2.2.32-150 27.08.2026 SB2026082726
SB2026090515
SB2026090516
and 12 more
#VU116663 - Exposure of sensitive information to an unauthorized actor
CVE-2025-61594		 CWE-200 Medium
No
No
 2.2.32-144 07.10.2025 SB2025100723
SB2025110338
SB2025111485
and 4 more
#VU115794 - Resource exhaustion
CVE-2025-58767		 CWE-400 Low
No
No
 2.2.32-144 18.09.2025 SB2025091868
SB2025102434
SB2025110338
and 12 more
#VU108125 - Resource exhaustion
CVE-2025-43857		 CWE-400 Low
No
No
 2.2.32-143 02.05.2025 SB2025050219
SB2025061336
SB2025081224
and 1 more
#VU105107 - Inefficient Regular Expression Complexity
CVE-2025-27220		 CWE-1333 Medium
No
No
 2.2.32-142 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 9 more
#VU105106 - Improper input validation
CVE-2025-27219		 CWE-20 Medium
No
No
 2.2.32-142 27.02.2025 SB20250227242
SB2025030761
SB2025031451
and 15 more
#VU105105 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27221		 CWE-200 Medium
No
No
 2.2.32-142, 2.2.32-144 27.02.2025 SB20250227241
SB2025030761
SB2025031451
and 16 more
#VU96970 - Resource exhaustion
CVE-2024-43398		 CWE-400 Medium
No
No
 2.2.32-139 10.09.2024 SB2024091006
SB2024091007
SB2024091008
and 28 more
#VU95149 - Improper input validation
CVE-2024-41123		 CWE-20 Medium
No
No
 2.2.32-139 01.08.2024 SB2024080145
SB2024091009
SB2024091607
and 24 more
#VU95148 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2024-41946		 CWE-776 Medium
No
No
 2.2.32-137 01.08.2024 SB2024080145
SB2024082374
SB2024091607
and 22 more
#VU94363 - Improper input validation
CVE-2024-39908		 CWE-20 Medium
No
No
 2.2.32-139 16.07.2024 SB2024071616
SB2024083015
SB2024091009
and 22 more
#VU94361 - Improper input validation
CVE-2024-35176		 CWE-20 Medium
Available
No
 2.2.32-136 16.07.2024 SB2024071615
SB2024071914
SB2024072112
and 19 more
#VU88970 - Out-of-bounds read
CVE-2024-27282		 CWE-125 Medium
No
No
 2.2.32-133 24.04.2024 SB2024042420
SB2024042421
SB2024042450
and 21 more
#VU85298 - Argument Injection or Modification
CVE-2021-43809		 CWE-88 Low
No
No
 2.2.33-1 11.01.2024 SB2024011117
SB2024020523
SB2021123107
and 7 more
#VU55666 - Insufficient Verification of Data Authenticity
CVE-2020-36327		 CWE-345 High
No
No
 2.2.19-1 09.08.2021 SB2021080910
SB2021080913
SB2021092218
and 21 more
#VU50511 - Improper input validation
CVE-2021-24105		 CWE-20 High
No
No
 2.2.19-1 09.02.2021 SB2021020965
SB2021070316
SB2021082548
and 2 more
#VU49352 - Files or Directories Accessible to External Parties
CVE-2019-3881		 CWE-552 Low
No
No
 2.2.19-1 04.09.2020 SB2020090421
SB2021010812
SB2021060717
and 4 more