https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:54:00.168015+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-3881 CVE-2019-3881 2026-09-28T07:54:00.190693+00:00

Affected: rubygem-bundler

Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.

 https://vulnerability.circl.lu/vuln/usn-4870-1 USN-4870-1 — bundler vulnerability 2026-09-28T07:54:00.190816+00:00

Affected: Ubuntu:Pro:18.04:LTS: bundler

It was discovered that Bundler incorrectly created directories with insecure permissions in /tmp. An attacker could write malicious libraries to this location for later execution.