Collective Idea Home Blog Home Blog Contact Bundler’s Multiple Source Security Vulnerability How Bundler is broken and what you can do about it by Steve Richert October 6, 2016 Bundler has a major security vulnerability that affects all stable versions. The vulnerability allows an attacker to inject arbitrary code into your application via any secondary gem source declared in your gemfile, whether