Bundler's Multiple Source Security Vulnerability | Collective IdeaBundler has a major security vulnerability that affects all stable versions. The vulnerability allows an attacker to inject arbitrary code into your application via any secondary gem source declared in your gemfile, whether or not that source is scoped to specific gems. CVE ID CVE-2016-7954 is assigned to this vulnerability. Over two years ago, a similar vulnerability (CVE-2013-0334) was discovere
