https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:54:00 +0000 https://vulnerability.circl.lu/vuln/cve-2019-3881 <p><strong>Affected:</strong> rubygem-bundler</p> <p>Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user&#39;s home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.</p> <p><strong>Affected:</strong> rubygem-bundler</p> <p>Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user&#39;s home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could place malicious code in this directory that would be later loaded and executed.</p> https://vulnerability.circl.lu/vuln/cve-2019-3881 https://vulnerability.circl.lu/vuln/usn-4870-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bundler</p> <p>It was discovered that Bundler incorrectly created directories with insecure permissions in /tmp. An attacker could write malicious libraries to this location for later execution.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: bundler</p> <p>It was discovered that Bundler incorrectly created directories with insecure permissions in /tmp. An attacker could write malicious libraries to this location for later execution.</p> https://vulnerability.circl.lu/vuln/usn-4870-1