All products

decidim-admin

RubyGems · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Decidim cross-site scripting (XSS) in the admin panelCVE-2024-27095 · GHSA-529P-JJ47-W3M3 decidim-admin RubyGems Medium Fix reported
Possibility to circumvent the invitation token expiry periodCVE-2023-48220 · GHSA-W3Q8-M492-4PWP decidim-admindecidim-system RubyGems Medium Fix reported
Decidim: Admin user search allows SQL injection through similarity-based sortingCVE-2026-45376 · GHSA-JVQQ-CVH4-XM37 decidim-admin RubyGems Medium Fix reported
Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity logCVE-2024-32034 · GHSA-RX9F-5GGV-5RH6 decidim-admin RubyGems Medium Fix reported