Microsoft Package Manager Configurations
2 CVEs affecting Microsoft Package Manager Configurations. Latest disclosed: 2021-04-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36327 | High | 8.8 | 2021-04-29 | Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue… |
CVE-2021-24105 | High | 8.4 | 2021-02-25 | <p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository whic… |