CVE-2021-43809

CVE-2021-43809 is a code execution vulnerability in Bundler versions prior to 2.2.33, a Ruby dependency manager. It arises when processing a crafted Gemfile that uses a Git dependency with a specially formatted URL starting with a dash, which can be misinterpreted as an optional argument to Git commands. This allows for arbitrary code execution, leading to potential system takeover, but requires significant user interaction to exploit. The vulnerability has a CVSS score of 7.3 (High) due to its impact, but its exploitability is low, and there is no evidence of active exploitation or publicly available exploit code.