spree
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls | spree | RubyGems | High | Fix reported | |
| Spree has Remote Command Execution vulnerability in search functionality | spree | RubyGems | Critical | Fix reported | |
| Spree: CSV Formula Injection in Customer Export | spree | RubyGems | Medium | Fix reported | |
| Spree Commerce is vulnerable to RCE through Search API | rd_searchlogicspree | RubyGems | Critical | Fix reported | |
| Spree does not properly restrict the use of a hash to provide values for a model's attributes | spree | RubyGems | Medium | Fix reported | |
| Spree uses a hardcoded hash value | spree | RubyGems | Medium | Fix reported | |
| Spree allows remote attackers to obtain sensitive information | spree | RubyGems | Medium | Fix reported | |
| Spree Improper Input Validation vulnerability | spree | RubyGems | Medium | Fix reported |