{"id":"CVE-2016-7954","details":"Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source.  NOTE: this might overlap CVE-2013-0334.","aliases":["GHSA-jvgm-pfqv-887x"],"modified":"2026-08-27T03:45:27.933976796Z","published":"2016-12-22T22:59:00.123Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:bundler:bundler:1.0.0:beta10:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:beta6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:beta7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:beta8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:beta9:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.0:rc6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:rc4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.4.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.0:rc:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0.0-beta1"},{"last_affected":"1.0.0-beta1"},{"introduced":"1.0.0-beta1"},{"last_affected":"1.0.0-beta1"},{"introduced":"1.0.0-beta1"},{"last_affected":"1.0.0-beta1"},{"introduced":"1.0.0-beta10"},{"last_affected":"1.0.0-beta10"},{"introduced":"1.0.0-beta10"},{"last_affected":"1.0.0-beta10"},{"introduced":"1.0.0-beta10"},{"last_affected":"1.0.0-beta10"},{"introduced":"1.0.0-beta6"},{"last_affected":"1.0.0-beta6"},{"introduced":"1.0.0-beta6"},{"last_affected":"1.0.0-beta6"},{"introduced":"1.0.0-beta6"},{"last_affected":"1.0.0-beta6"},{"introduced":"1.0.0-beta7"},{"last_affected":"1.0.0-beta7"},{"introduced":"1.0.0-beta7"},{"last_affected":"1.0.0-beta7"},{"introduced":"1.0.0-beta7"},{"last_affected":"1.0.0-beta7"},{"introduced":"1.0.0-beta8"},{"last_affected":"1.0.0-beta8"},{"introduced":"1.0.0-beta8"},{"last_affected":"1.0.0-beta8"},{"introduced":"1.0.0-beta8"},{"last_affected":"1.0.0-beta8"},{"introduced":"1.0.0-beta9"},{"last_affected":"1.0.0-beta9"},{"introduced":"1.0.0-beta9"},{"last_affected":"1.0.0-beta9"},{"introduced":"1.0.0-beta9"},{"last_affected":"1.0.0-beta9"},{"introduced":"1.0.0-rc1"},{"last_affected":"1.0.0-rc1"},{"introduced":"1.0.0-rc1"},{"last_affected":"1.0.0-rc1"},{"introduced":"1.0.0-rc1"},{"last_affected":"1.0.0-rc1"},{"introduced":"1.0.0-rc2"},{"last_affected":"1.0.0-rc2"},{"introduced":"1.0.0-rc2"},{"last_affected":"1.0.0-rc2"},{"introduced":"1.0.0-rc2"},{"last_affected":"1.0.0-rc2"},{"introduced":"1.0.0-rc3"},{"last_affected":"1.0.0-rc3"},{"introduced":"1.0.0-rc3"},{"last_affected":"1.0.0-rc3"},{"introduced":"1.0.0-rc3"},{"last_affected":"1.0.0-rc3"},{"introduced":"1.0.0-rc4"},{"last_affected":"1.0.0-rc4"},{"introduced":"1.0.0-rc4"},{"last_affected":"1.0.0-rc4"},{"introduced":"1.0.0-rc4"},{"last_affected":"1.0.0-rc4"},{"introduced":"1.0.0-rc5"},{"last_affected":"1.0.0-rc5"},{"introduced":"1.0.0-rc5"},{"last_affected":"1.0.0-rc5"},{"introduced":"1.0.0-rc5"},{"last_affected":"1.0.0-rc5"},{"introduced":"1.0.0-rc6"},{"last_affected":"1.0.0-rc6"},{"introduced":"1.0.0-rc6"},{"last_affected":"1.0.0-rc6"},{"introduced":"1.0.0-rc6"},{"last_affected":"1.0.0-rc6"},{"introduced":"1.1-rc2"},{"last_affected":"1.1-rc2"},{"introduced":"1.1-rc2"},{"last_affected":"1.1-rc2"},{"introduced":"1.1-rc2"},{"last_affected":"1.1-rc2"},{"introduced":"1.1-rc3"},{"last_affected":"1.1-rc3"},{"introduced":"1.1-rc3"},{"last_affected":"1.1-rc3"},{"introduced":"1.1-rc3"},{"last_affected":"1.1-rc3"},{"introduced":"1.1-rc4"},{"last_affected":"1.1-rc4"},{"introduced":"1.1-rc4"},{"last_affected":"1.1-rc4"},{"introduced":"1.1-rc4"},{"last_affected":"1.1-rc4"},{"introduced":"1.1-rc5"},{"last_affected":"1.1-rc5"},{"introduced":"1.1-rc5"},{"last_affected":"1.1-rc5"},{"introduced":"1.1-rc5"},{"last_affected":"1.1-rc5"},{"introduced":"1.1-rc6"},{"last_affected":"1.1-rc6"},{"introduced":"1.1-rc6"},{"last_affected":"1.1-rc6"},{"introduced":"1.1-rc6"},{"last_affected":"1.1-rc6"},{"introduced":"1.1-rc7"},{"last_affected":"1.1-rc7"},{"introduced":"1.1-rc7"},{"last_affected":"1.1-rc7"},{"introduced":"1.1-rc7"},{"last_affected":"1.1-rc7"},{"introduced":"1.1-rc8"},{"last_affected":"1.1-rc8"},{"introduced":"1.1-rc8"},{"last_affected":"1.1-rc8"},{"introduced":"1.1-rc8"},{"last_affected":"1.1-rc8"},{"introduced":"1.2.0-rc2"},{"last_affected":"1.2.0-rc2"},{"introduced":"1.2.0-rc2"},{"last_affected":"1.2.0-rc2"},{"introduced":"1.2.0-rc2"},{"last_affected":"1.2.0-rc2"},{"introduced":"1.4.0-rc1"},{"last_affected":"1.4.0-rc1"},{"introduced":"1.4.0-rc1"},{"last_affected":"1.4.0-rc1"},{"introduced":"1.4.0-rc1"},{"last_affected":"1.4.0-rc1"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc1"},{"last_affected":"1.5.0-rc1"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.5.0-rc2"},{"last_affected":"1.5.0-rc2"},{"introduced":"1.8.0-rc"},{"last_affected":"1.8.0-rc"},{"introduced":"1.8.0-rc"},{"last_affected":"1.8.0-rc"},{"introduced":"1.8.0-rc"},{"last_affected":"1.8.0-rc"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc2"},{"last_affected":"1.12.0-rc2"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.0-rc3"},{"last_affected":"1.12.0-rc3"},{"introduced":"1.12.0-rc4"},{"last_affected":"1.12.0-rc4"},{"introduced":"1.12.0-rc4"},{"last_affected":"1.12.0-rc4"},{"introduced":"1.12.0-rc4"},{"last_affected":"1.12.0-rc4"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"}],"source":"CPE_STRING","vendor_product":"bundler:bundler"}]},"references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/10/04/5"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/10/04/7"},{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2016/10/05/3"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/93423"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1381951"},{"type":"FIX","url":"https://github.com/bundler/bundler/issues/5051"},{"type":"FIX","url":"https://github.com/bundler/bundler/issues/5062"},{"type":"EVIDENCE","url":"http://collectiveidea.com/blog/archives/2016/10/06/bundlers-multiple-source-security-vulnerability/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ruby/rubygems","events":[{"introduced":"729df04fd9a2d4c9af86926a60ed1d73c11aad9d"},{"last_affected":"a79a6385640be23b46e2f6151424cec940d67486"}],"database_specific":{"source":"CPE_STRING","cpe":["cpe:2.3:a:bundler:bundler:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.11:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.12:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.13:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.14:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.15:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.16:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.17:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.18:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.19:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.20:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.20:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.21:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.21:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre10:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre9:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.4.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.11:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.12:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.13:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.14:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.15:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.6:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"},{"introduced":"1.0.2"},{"last_affected":"1.0.2"},{"introduced":"1.0.3"},{"last_affected":"1.0.3"},{"introduced":"1.0.4"},{"last_affected":"1.0.4"},{"introduced":"1.0.5"},{"last_affected":"1.0.5"},{"introduced":"1.0.6"},{"last_affected":"1.0.6"},{"introduced":"1.0.7"},{"last_affected":"1.0.7"},{"introduced":"1.0.8"},{"last_affected":"1.0.8"},{"introduced":"1.0.9"},{"last_affected":"1.0.9"},{"introduced":"1.0.10"},{"last_affected":"1.0.10"},{"introduced":"1.0.11"},{"last_affected":"1.0.11"},{"introduced":"1.0.12"},{"last_affected":"1.0.12"},{"introduced":"1.0.13"},{"last_affected":"1.0.13"},{"introduced":"1.0.14"},{"last_affected":"1.0.14"},{"introduced":"1.0.15"},{"last_affected":"1.0.15"},{"introduced":"1.0.16"},{"last_affected":"1.0.16"},{"introduced":"1.0.17"},{"last_affected":"1.0.17"},{"introduced":"1.0.18"},{"last_affected":"1.0.18"},{"introduced":"1.0.19-rc"},{"last_affected":"1.0.19-rc"},{"introduced":"1.0.20"},{"last_affected":"1.0.20"},{"introduced":"1.0.20-rc"},{"last_affected":"1.0.20-rc"},{"introduced":"1.0.21"},{"last_affected":"1.0.21"},{"introduced":"1.0.21-rc"},{"last_affected":"1.0.21-rc"},{"introduced":"1.1-pre"},{"last_affected":"1.1-pre"},{"introduced":"1.1-pre1"},{"last_affected":"1.1-pre1"},{"introduced":"1.1.1"},{"last_affected":"1.1.1"},{"introduced":"1.1-pre10"},{"last_affected":"1.1-pre10"},{"introduced":"1.1-pre2"},{"last_affected":"1.1-pre2"},{"introduced":"1.1.2"},{"last_affected":"1.1.2"},{"introduced":"1.1-pre3"},{"last_affected":"1.1-pre3"},{"introduced":"1.1.3"},{"last_affected":"1.1.3"},{"introduced":"1.1-pre4"},{"last_affected":"1.1-pre4"},{"introduced":"1.1.4"},{"last_affected":"1.1.4"},{"introduced":"1.1-pre5"},{"last_affected":"1.1-pre5"},{"introduced":"1.1.5"},{"last_affected":"1.1.5"},{"introduced":"1.1-pre6"},{"last_affected":"1.1-pre6"},{"introduced":"1.1-pre7"},{"last_affected":"1.1-pre7"},{"introduced":"1.1-pre8"},{"last_affected":"1.1-pre8"},{"introduced":"1.1-pre9"},{"last_affected":"1.1-pre9"},{"introduced":"1.1-rc"},{"last_affected":"1.1-rc"},{"introduced":"1.1.0"},{"last_affected":"1.1.0"},{"introduced":"1.2.0"},{"last_affected":"1.2.0"},{"introduced":"1.2.0-pre"},{"last_affected":"1.2.0-pre"},{"introduced":"1.2.0-pre1"},{"last_affected":"1.2.0-pre1"},{"introduced":"1.2.0-rc"},{"last_affected":"1.2.0-rc"},{"introduced":"1.2.1"},{"last_affected":"1.2.1"},{"introduced":"1.2.2"},{"last_affected":"1.2.2"},{"introduced":"1.2.3"},{"last_affected":"1.2.3"},{"introduced":"1.2.4"},{"last_affected":"1.2.4"},{"introduced":"1.2.5"},{"last_affected":"1.2.5"},{"introduced":"1.3.0"},{"last_affected":"1.3.0"},{"introduced":"1.3.0-pre"},{"last_affected":"1.3.0-pre"},{"introduced":"1.3.0-pre2"},{"last_affected":"1.3.0-pre2"},{"introduced":"1.3.0-pre3"},{"last_affected":"1.3.0-pre3"},{"introduced":"1.3.0-pre4"},{"last_affected":"1.3.0-pre4"},{"introduced":"1.3.0-pre5"},{"last_affected":"1.3.0-pre5"},{"introduced":"1.3.0-pre6"},{"last_affected":"1.3.0-pre6"},{"introduced":"1.3.0-pre7"},{"last_affected":"1.3.0-pre7"},{"introduced":"1.3.0-pre8"},{"last_affected":"1.3.0-pre8"},{"introduced":"1.3.1"},{"last_affected":"1.3.1"},{"introduced":"1.3.2"},{"last_affected":"1.3.2"},{"introduced":"1.3.3"},{"last_affected":"1.3.3"},{"introduced":"1.3.4"},{"last_affected":"1.3.4"},{"introduced":"1.3.5"},{"last_affected":"1.3.5"},{"introduced":"1.3.6"},{"last_affected":"1.3.6"},{"introduced":"1.4.0-pre1"},{"last_affected":"1.4.0-pre1"},{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.5.3"},{"last_affected":"1.5.3"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.2"},{"last_affected":"1.6.2"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.6.4"},{"last_affected":"1.6.4"},{"introduced":"1.6.5"},{"last_affected":"1.6.5"},{"introduced":"1.6.6"},{"last_affected":"1.6.6"},{"introduced":"1.6.7"},{"last_affected":"1.6.7"},{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.7.1"},{"last_affected":"1.7.1"},{"introduced":"1.7.2"},{"last_affected":"1.7.2"},{"introduced":"1.7.3"},{"last_affected":"1.7.3"},{"introduced":"1.7.4"},{"last_affected":"1.7.4"},{"introduced":"1.7.5"},{"last_affected":"1.7.5"},{"introduced":"1.7.6"},{"last_affected":"1.7.6"},{"introduced":"1.7.7"},{"last_affected":"1.7.7"},{"introduced":"1.7.8"},{"last_affected":"1.7.8"},{"introduced":"1.7.9"},{"last_affected":"1.7.9"},{"introduced":"1.7.10"},{"last_affected":"1.7.10"},{"introduced":"1.7.11"},{"last_affected":"1.7.11"},{"introduced":"1.7.12"},{"last_affected":"1.7.12"},{"introduced":"1.7.13"},{"last_affected":"1.7.13"},{"introduced":"1.7.14"},{"last_affected":"1.7.14"},{"introduced":"1.7.15"},{"last_affected":"1.7.15"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.8.0-pre"},{"last_affected":"1.8.0-pre"},{"introduced":"1.8.1"},{"last_affected":"1.8.1"},{"introduced":"1.8.2"},{"last_affected":"1.8.2"},{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"},{"introduced":"1.8.5"},{"last_affected":"1.8.5"},{"introduced":"1.8.6"},{"last_affected":"1.8.6"},{"introduced":"1.8.7"},{"last_affected":"1.8.7"},{"introduced":"1.8.8"},{"last_affected":"1.8.8"},{"introduced":"1.8.9"},{"last_affected":"1.8.9"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.0-pre"},{"last_affected":"1.9.0-pre"},{"introduced":"1.9.0-pre1"},{"last_affected":"1.9.0-pre1"},{"introduced":"1.9.0-rc"},{"last_affected":"1.9.0-rc"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.9.2"},{"last_affected":"1.9.2"},{"introduced":"1.9.3"},{"last_affected":"1.9.3"},{"introduced":"1.9.4"},{"last_affected":"1.9.4"},{"introduced":"1.9.5"},{"last_affected":"1.9.5"},{"introduced":"1.9.6"},{"last_affected":"1.9.6"},{"introduced":"1.9.7"},{"last_affected":"1.9.7"},{"introduced":"1.9.8"},{"last_affected":"1.9.8"},{"introduced":"1.9.9"},{"last_affected":"1.9.9"},{"introduced":"1.9.10"},{"last_affected":"1.9.10"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.10.0-pre"},{"last_affected":"1.10.0-pre"},{"introduced":"1.10.0-pre1"},{"last_affected":"1.10.0-pre1"},{"introduced":"1.10.0-pre2"},{"last_affected":"1.10.0-pre2"},{"introduced":"1.10.0-rc"},{"last_affected":"1.10.0-rc"},{"introduced":"1.10.1"},{"last_affected":"1.10.1"},{"introduced":"1.10.2"},{"last_affected":"1.10.2"},{"introduced":"1.10.3"},{"last_affected":"1.10.3"},{"introduced":"1.10.4"},{"last_affected":"1.10.4"},{"introduced":"1.10.5"},{"last_affected":"1.10.5"},{"introduced":"1.10.6"},{"last_affected":"1.10.6"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-pre1"},{"last_affected":"1.11.0-pre1"},{"introduced":"1.11.0-pre2"},{"last_affected":"1.11.0-pre2"},{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.12.0-pre1"},{"last_affected":"1.12.0-pre1"},{"introduced":"1.12.0-pre2"},{"last_affected":"1.12.0-pre2"},{"introduced":"1.12.0-rc"},{"last_affected":"1.12.0-rc"},{"introduced":"1.12.1"},{"last_affected":"1.12.1"},{"introduced":"1.12.2"},{"last_affected":"1.12.2"},{"introduced":"1.12.3"},{"last_affected":"1.12.3"},{"introduced":"1.12.4"},{"last_affected":"1.12.4"},{"introduced":"1.12.5"},{"last_affected":"1.12.5"},{"introduced":"1.12.6"},{"last_affected":"1.12.6"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.13.0-pre1"},{"last_affected":"1.13.0-pre1"},{"introduced":"1.13.1"},{"last_affected":"1.13.1"},{"introduced":"1.13.2"},{"last_affected":"1.13.2"},{"introduced":"1.13.3"},{"last_affected":"1.13.3"},{"introduced":"1.13.4"},{"last_affected":"1.13.4"},{"introduced":"1.13.5"},{"last_affected":"1.13.5"},{"introduced":"1.13.6"},{"last_affected":"1.13.6"}]}}],"versions":["1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19-rc","1.0.2","1.0.20","1.0.20-rc","1.0.21","1.0.21-rc","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1-pre","1.1-pre1","1.1-pre10","1.1-pre2","1.1-pre3","1.1-pre4","1.1-pre5","1.1-pre6","1.1-pre7","1.1-pre8","1.1-pre9","1.1-rc","1.1.0","1.10.0","1.10.0-pre1","1.10.0-pre2","1.10.0-rc","1.10.1","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.11.0","1.11.0-pre1","1.11.0-pre2","1.11.1","1.11.2","1.12.0","1.12.0-pre1","1.12.0-pre2","1.12.0-rc","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.12.6","1.13.0","1.13.0-pre1","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","1.2.0","1.2.0-pre1","1.2.0-rc","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.3.0","1.3.0-pre2","1.3.0-pre3","1.3.0-pre4","1.3.0-pre5","1.3.0-pre6","1.3.0-pre7","1.3.0-pre8","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.4.0-pre1","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.7.0","1.7.1","1.7.10","1.7.11","1.7.12","1.7.13","1.7.14","1.7.15","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.8.8","1.8.9","1.9.0","1.9.0-pre1","1.9.0-rc","1.9.1","1.9.10","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","1.9.7","1.9.8","1.9.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7954.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/rubygems/bundler","events":[{"introduced":"fa2ee3f0b03bd6bf5286ea900338b06bf7d53888"},{"last_affected":"a79a6385640be23b46e2f6151424cec940d67486"}],"database_specific":{"extracted_events":[{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"},{"introduced":"1.0.2"},{"last_affected":"1.0.2"},{"introduced":"1.0.3"},{"last_affected":"1.0.3"},{"introduced":"1.0.4"},{"last_affected":"1.0.4"},{"introduced":"1.0.5"},{"last_affected":"1.0.5"},{"introduced":"1.0.6"},{"last_affected":"1.0.6"},{"introduced":"1.0.7"},{"last_affected":"1.0.7"},{"introduced":"1.0.8"},{"last_affected":"1.0.8"},{"introduced":"1.0.9"},{"last_affected":"1.0.9"},{"introduced":"1.0.10"},{"last_affected":"1.0.10"},{"introduced":"1.0.11"},{"last_affected":"1.0.11"},{"introduced":"1.0.12"},{"last_affected":"1.0.12"},{"introduced":"1.0.13"},{"last_affected":"1.0.13"},{"introduced":"1.0.14"},{"last_affected":"1.0.14"},{"introduced":"1.0.15"},{"last_affected":"1.0.15"},{"introduced":"1.0.16"},{"last_affected":"1.0.16"},{"introduced":"1.0.17"},{"last_affected":"1.0.17"},{"introduced":"1.0.18"},{"last_affected":"1.0.18"},{"introduced":"1.0.19-rc"},{"last_affected":"1.0.19-rc"},{"introduced":"1.0.20"},{"last_affected":"1.0.20"},{"introduced":"1.0.20-rc"},{"last_affected":"1.0.20-rc"},{"introduced":"1.0.21"},{"last_affected":"1.0.21"},{"introduced":"1.0.21-rc"},{"last_affected":"1.0.21-rc"},{"introduced":"1.1-pre"},{"last_affected":"1.1-pre"},{"introduced":"1.1-pre1"},{"last_affected":"1.1-pre1"},{"introduced":"1.1.1"},{"last_affected":"1.1.1"},{"introduced":"1.1-pre10"},{"last_affected":"1.1-pre10"},{"introduced":"1.1-pre2"},{"last_affected":"1.1-pre2"},{"introduced":"1.1.2"},{"last_affected":"1.1.2"},{"introduced":"1.1-pre3"},{"last_affected":"1.1-pre3"},{"introduced":"1.1.3"},{"last_affected":"1.1.3"},{"introduced":"1.1-pre4"},{"last_affected":"1.1-pre4"},{"introduced":"1.1.4"},{"last_affected":"1.1.4"},{"introduced":"1.1-pre5"},{"last_affected":"1.1-pre5"},{"introduced":"1.1.5"},{"last_affected":"1.1.5"},{"introduced":"1.1-pre6"},{"last_affected":"1.1-pre6"},{"introduced":"1.1-pre7"},{"last_affected":"1.1-pre7"},{"introduced":"1.1-pre8"},{"last_affected":"1.1-pre8"},{"introduced":"1.1-pre9"},{"last_affected":"1.1-pre9"},{"introduced":"1.1-rc"},{"last_affected":"1.1-rc"},{"introduced":"1.1.0"},{"last_affected":"1.1.0"},{"introduced":"1.2.0"},{"last_affected":"1.2.0"},{"introduced":"1.2.0-pre"},{"last_affected":"1.2.0-pre"},{"introduced":"1.2.0-pre1"},{"last_affected":"1.2.0-pre1"},{"introduced":"1.2.0-rc"},{"last_affected":"1.2.0-rc"},{"introduced":"1.2.1"},{"last_affected":"1.2.1"},{"introduced":"1.2.2"},{"last_affected":"1.2.2"},{"introduced":"1.2.3"},{"last_affected":"1.2.3"},{"introduced":"1.2.4"},{"last_affected":"1.2.4"},{"introduced":"1.2.5"},{"last_affected":"1.2.5"},{"introduced":"1.3.0"},{"last_affected":"1.3.0"},{"introduced":"1.3.0-pre"},{"last_affected":"1.3.0-pre"},{"introduced":"1.3.0-pre2"},{"last_affected":"1.3.0-pre2"},{"introduced":"1.3.0-pre3"},{"last_affected":"1.3.0-pre3"},{"introduced":"1.3.0-pre4"},{"last_affected":"1.3.0-pre4"},{"introduced":"1.3.0-pre5"},{"last_affected":"1.3.0-pre5"},{"introduced":"1.3.0-pre6"},{"last_affected":"1.3.0-pre6"},{"introduced":"1.3.0-pre7"},{"last_affected":"1.3.0-pre7"},{"introduced":"1.3.0-pre8"},{"last_affected":"1.3.0-pre8"},{"introduced":"1.3.1"},{"last_affected":"1.3.1"},{"introduced":"1.3.2"},{"last_affected":"1.3.2"},{"introduced":"1.3.3"},{"last_affected":"1.3.3"},{"introduced":"1.3.4"},{"last_affected":"1.3.4"},{"introduced":"1.3.5"},{"last_affected":"1.3.5"},{"introduced":"1.3.6"},{"last_affected":"1.3.6"},{"introduced":"1.4.0-pre1"},{"last_affected":"1.4.0-pre1"},{"introduced":"1.5.0"},{"last_affected":"1.5.0"},{"introduced":"1.5.1"},{"last_affected":"1.5.1"},{"introduced":"1.5.2"},{"last_affected":"1.5.2"},{"introduced":"1.5.3"},{"last_affected":"1.5.3"},{"introduced":"1.6.0"},{"last_affected":"1.6.0"},{"introduced":"1.6.1"},{"last_affected":"1.6.1"},{"introduced":"1.6.2"},{"last_affected":"1.6.2"},{"introduced":"1.6.3"},{"last_affected":"1.6.3"},{"introduced":"1.6.4"},{"last_affected":"1.6.4"},{"introduced":"1.6.5"},{"last_affected":"1.6.5"},{"introduced":"1.6.6"},{"last_affected":"1.6.6"},{"introduced":"1.6.7"},{"last_affected":"1.6.7"},{"introduced":"1.7.0"},{"last_affected":"1.7.0"},{"introduced":"1.7.1"},{"last_affected":"1.7.1"},{"introduced":"1.7.2"},{"last_affected":"1.7.2"},{"introduced":"1.7.3"},{"last_affected":"1.7.3"},{"introduced":"1.7.4"},{"last_affected":"1.7.4"},{"introduced":"1.7.5"},{"last_affected":"1.7.5"},{"introduced":"1.7.6"},{"last_affected":"1.7.6"},{"introduced":"1.7.7"},{"last_affected":"1.7.7"},{"introduced":"1.7.8"},{"last_affected":"1.7.8"},{"introduced":"1.7.9"},{"last_affected":"1.7.9"},{"introduced":"1.7.10"},{"last_affected":"1.7.10"},{"introduced":"1.7.11"},{"last_affected":"1.7.11"},{"introduced":"1.7.12"},{"last_affected":"1.7.12"},{"introduced":"1.7.13"},{"last_affected":"1.7.13"},{"introduced":"1.7.14"},{"last_affected":"1.7.14"},{"introduced":"1.7.15"},{"last_affected":"1.7.15"},{"introduced":"1.8.0"},{"last_affected":"1.8.0"},{"introduced":"1.8.0-pre"},{"last_affected":"1.8.0-pre"},{"introduced":"1.8.1"},{"last_affected":"1.8.1"},{"introduced":"1.8.2"},{"last_affected":"1.8.2"},{"introduced":"1.8.3"},{"last_affected":"1.8.3"},{"introduced":"1.8.4"},{"last_affected":"1.8.4"},{"introduced":"1.8.5"},{"last_affected":"1.8.5"},{"introduced":"1.8.6"},{"last_affected":"1.8.6"},{"introduced":"1.8.7"},{"last_affected":"1.8.7"},{"introduced":"1.8.8"},{"last_affected":"1.8.8"},{"introduced":"1.8.9"},{"last_affected":"1.8.9"},{"introduced":"1.9.0"},{"last_affected":"1.9.0"},{"introduced":"1.9.0-pre"},{"last_affected":"1.9.0-pre"},{"introduced":"1.9.0-pre1"},{"last_affected":"1.9.0-pre1"},{"introduced":"1.9.0-rc"},{"last_affected":"1.9.0-rc"},{"introduced":"1.9.1"},{"last_affected":"1.9.1"},{"introduced":"1.9.2"},{"last_affected":"1.9.2"},{"introduced":"1.9.3"},{"last_affected":"1.9.3"},{"introduced":"1.9.4"},{"last_affected":"1.9.4"},{"introduced":"1.9.5"},{"last_affected":"1.9.5"},{"introduced":"1.9.6"},{"last_affected":"1.9.6"},{"introduced":"1.9.7"},{"last_affected":"1.9.7"},{"introduced":"1.9.8"},{"last_affected":"1.9.8"},{"introduced":"1.9.9"},{"last_affected":"1.9.9"},{"introduced":"1.9.10"},{"last_affected":"1.9.10"},{"introduced":"1.10.0"},{"last_affected":"1.10.0"},{"introduced":"1.10.0-pre"},{"last_affected":"1.10.0-pre"},{"introduced":"1.10.0-pre1"},{"last_affected":"1.10.0-pre1"},{"introduced":"1.10.0-pre2"},{"last_affected":"1.10.0-pre2"},{"introduced":"1.10.0-rc"},{"last_affected":"1.10.0-rc"},{"introduced":"1.10.1"},{"last_affected":"1.10.1"},{"introduced":"1.10.2"},{"last_affected":"1.10.2"},{"introduced":"1.10.3"},{"last_affected":"1.10.3"},{"introduced":"1.10.4"},{"last_affected":"1.10.4"},{"introduced":"1.10.5"},{"last_affected":"1.10.5"},{"introduced":"1.10.6"},{"last_affected":"1.10.6"},{"introduced":"1.11.0"},{"last_affected":"1.11.0"},{"introduced":"1.11.0-pre1"},{"last_affected":"1.11.0-pre1"},{"introduced":"1.11.0-pre2"},{"last_affected":"1.11.0-pre2"},{"introduced":"1.11.1"},{"last_affected":"1.11.1"},{"introduced":"1.11.2"},{"last_affected":"1.11.2"},{"introduced":"1.12.0"},{"last_affected":"1.12.0"},{"introduced":"1.12.0-pre1"},{"last_affected":"1.12.0-pre1"},{"introduced":"1.12.0-pre2"},{"last_affected":"1.12.0-pre2"},{"introduced":"1.12.0-rc"},{"last_affected":"1.12.0-rc"},{"introduced":"1.12.1"},{"last_affected":"1.12.1"},{"introduced":"1.12.2"},{"last_affected":"1.12.2"},{"introduced":"1.12.3"},{"last_affected":"1.12.3"},{"introduced":"1.12.4"},{"last_affected":"1.12.4"},{"introduced":"1.12.5"},{"last_affected":"1.12.5"},{"introduced":"1.12.6"},{"last_affected":"1.12.6"},{"introduced":"1.13.0"},{"last_affected":"1.13.0"},{"introduced":"1.13.0-pre1"},{"last_affected":"1.13.0-pre1"},{"introduced":"1.13.1"},{"last_affected":"1.13.1"},{"introduced":"1.13.2"},{"last_affected":"1.13.2"},{"introduced":"1.13.3"},{"last_affected":"1.13.3"},{"introduced":"1.13.4"},{"last_affected":"1.13.4"},{"introduced":"1.13.5"},{"last_affected":"1.13.5"},{"introduced":"1.13.6"},{"last_affected":"1.13.6"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:bundler:bundler:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.11:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.12:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.13:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.14:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.15:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.16:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.17:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.18:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.19:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.20:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.20:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.21:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.0.21:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre10:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:pre9:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre3:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre4:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre5:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre6:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre7:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.0:pre8:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.3.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.4.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.6.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.11:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.12:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.13:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.14:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.7.15:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.8.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.7:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.8:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.9:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.9.10:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.10.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.11.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:pre2:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.0:rc:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.12.6:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.0:pre1:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.1:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.2:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.3:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.4:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.5:*:*:*:*:*:*:*","cpe:2.3:a:bundler:bundler:1.13.6:*:*:*:*:*:*:*"]}}],"versions":["1.0.0","1.0.1","1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19-rc","1.0.2","1.0.20","1.0.20-rc","1.0.21","1.0.21-rc","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1-pre","1.1-pre1","1.1-pre10","1.1-pre2","1.1-pre3","1.1-pre4","1.1-pre5","1.1-pre6","1.1-pre7","1.1-pre8","1.1-pre9","1.1-rc","1.1.0","1.10.0","1.10.0-pre1","1.10.0-pre2","1.10.0-rc","1.10.1","1.10.2","1.10.3","1.10.4","1.10.5","1.10.6","1.11.0","1.11.0-pre1","1.11.0-pre2","1.11.1","1.11.2","1.12.0","1.12.0-pre1","1.12.0-pre2","1.12.0-rc","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.12.6","1.13.0","1.13.0-pre1","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","1.2.0","1.2.0-pre1","1.2.0-rc","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.3.0","1.3.0-pre2","1.3.0-pre3","1.3.0-pre4","1.3.0-pre5","1.3.0-pre6","1.3.0-pre7","1.3.0-pre8","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.4.0-pre1","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.7.0","1.7.1","1.7.10","1.7.11","1.7.12","1.7.13","1.7.14","1.7.15","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.8.8","1.8.9","1.9.0","1.9.0-pre1","1.9.0-rc","1.9.1","1.9.10","1.9.2","1.9.3","1.9.4","1.9.5","1.9.6","1.9.7","1.9.8","1.9.9","v1.13.6","v1.13.5","v1.13.4","v1.13.3","v1.13.2","v1.13.1","v1.13.0","v1.13.0.rc.2","v1.10.0.pre.2","v1.10.0.pre.1","v1.10.0.pre","v1.9.0.rc","v1.9.0.pre.1","v1.9.0.pre","v1.8.0.pre","v1.6.1","v1.6.0","v1.6.0.rc2","v1.6.0.rc","v1.6.0.pre.2","v1.6.0.pre.1","v1.5.0.rc.1","v1.4.0.rc.1","v1.4.0.pre.2","v1.4.0.pre.1","v1.3.1","v1.3.2","v1.3.0","v1.3.0.pre.8","v1.3.0.pre.7","v1.3.0.pre.6","v1.3.0.pre.5","v1.3.0.pre.4","v1.3.0.pre.3","v1.3.0.pre.2","v1.3.0.pre","v1.2.0.rc.2","v1.2.0.rc","v1.2.0.pre.1","v1.2.0.pre","v1.1.rc.5","v1.1.rc.4","v1.1.rc.3","v1.1.rc.2","v1.1.rc","v1.1.pre.10","v1.1.pre.9","v1.1.pre.8","v1.1.pre.7","v1.1.pre.6","v1.1.pre.5","v1.1.pre.4","v1.1.pre.3","v1.1.pre.2","v1.1.pre.1","v1.1.pre","v1.0.1","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7954.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}