While working on a project, I discovered a major security vulnerability that affects all stable versions of Bundler.