[{"CVE":"CVE-2019-3881","severity":"moderate","public_date":"2018-05-23T00:00:00Z","advisories":[],"bugzilla":"1651826","bugzilla_description":"CVE-2019-3881 rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-552","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3881.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2016-7954","severity":"moderate","public_date":"2016-10-04T00:00:00Z","advisories":[],"bugzilla":"1381951","bugzilla_description":"CVE-2016-7954 rubygem-bundler: Code execution via gem name collision in bundler","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-94","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7954.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.9"},{"CVE":"CVE-2013-0334","severity":"moderate","public_date":"2014-08-14T00:00:00Z","advisories":["RHSA-2015:2180"],"bugzilla":"1146335","bugzilla_description":"CVE-2013-0334 rubygem-bundler: 'bundle install' may install a gem from a source other than expected","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-345","affected_packages":["rubygem-bundler-0:1.7.8-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0334.json"}]