Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems pageflow Security Advisories

Browse all Security Advisories for rubygems pageflow

Loading...
High
GSA_kwCzR0hTQS1xY3F2LTM4amctMnI0M84AAuzt
Pageflow vulnerable to insecure direct object reference in membership update endpoint
Ecosystems: rubygems
Packages: pageflow
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
High
GSA_kwCzR0hTQS13cnJ3LWNycDgtOTc5cc4AAuzs
Pageflow vulnerable to sensitive user data extraction via Ransack query injection
Ecosystems: rubygems
Packages: pageflow
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 2 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 1
Ecosystems: 12
Filter by Package
actionpack 60 nokogiri 43 rubygems-update 25 rack 23 puppet 23 activerecord 21 publify_core 14 activesupport 14 camaleon_cms 14 passenger 13 actionview 12 puma 12 rails 11 decidim 11 fat_free_crm 10 bootstrap 9 org.webjars:bootstrap 9 bootstrap 9 bootstrap 9 twbs/bootstrap 9 rails-html-sanitizer 9 jquery-rails 9 bootstrap-sass 8 org.webjars.npm:jquery 8 jquery 8 jQuery.UI.Combined 7 jQuery 7 org.webjars.npm:jquery-ui 7 jquery-ui-rails 7 jquery-ui 7 rexml 7 org.jruby:jruby-stdlib 7 bootstrap.sass 7 doorkeeper 6 katello 6 ember-source 6 loofah 6 spree_auth_devise 5 grpc 5 bundler 5 grpcio 5 sidekiq 5 bootstrap-sass 5 webrick 5 sinatra 5 commonmarker 5 spree 5 ruby-saml 4 carrierwave 4 rails_admin 4 activestorage 4 fluentd 4 devise 4 mail 4 dragonfly 4 sanitize 4 avo 4 decidim-core 3 openc3 3 private_address_check 3 phlex 3 rubyzip 3 openc3 3 git 3 decidim-admin 3 actiontext 3 com.google.protobuf:protobuf-java 3 com.google.protobuf:protobuf-kotlin 3 cgi 3 json-jwt 3 rest-client 3 resque 3 gollum 3 spina 3 geminabox 3 rack-cors 3 yard 3 io.grpc:grpc-protobuf 3 chartkick 3 activeadmin 3 omniauth 3 rdoc 3 openssl 3 devise-two-factor 3 google-protobuf 3 omniauth-saml 2 decidim-meetings 2 yajl-ruby 2 mini_magick 2 administrate 2 sidekiq-unique-jobs 2 omniauth-facebook 2 decidim-templates 2 view_component 2 pyarrow 2 red-arrow 2 pdfkit 2 com.google.protobuf:protobuf-kotlin-lite 2 com.google.protobuf:protobuf-javalite 2 VladTheEnterprising 2 sprockets 2 secure_headers 2 httparty 2 mechanize 2 git-fastclone 2 net-ldap 2 kramdown 2 paperclip 2 org.webjars.npm:bootstrap 2 field_test 2 redcarpet 2 echor 2 solidus_core 2 solidus_frontend 2 cocoapods-downloader 2 ox 2 maximebf/debugbar 2 pghero 2 user_agent_parser 2 kaminari 2 faye 2 twitter-bootstrap-rails 2 bson 2 pageflow 2 ruby-openid 2 mapbox-rails 2 mapbox.js 2 radiant 2 i18n 2 facter 2 logstash-core 2 uri 2 sup 2 actionmailer 2 qiita-markdown 2 json 2 @openc3/tool-common 2 safemode 2 consul 1 gon 1 request_store 1 omniauth-microsoft_graph 1 padrino-contrib 1 colorscore 1 bolt 1 activemodel 1 gibbon 1 will_paginate 1 alchemy_cms 1 svg_optimizer 1 fastreader 1 http 1 rack-ssl 1 bio-basespace-sdk 1 jquery-ujs 1 nori 1 pgsync 1 espeak-ruby 1 redis-store 1 smart_proxy_dynflow 1 thumbshooter 1 crack 1 aescrypt 1 cron_parser 1 coin_base 1 blockchain_wallet 1 awesome-bot 1 doge-coin 1 capistrano-colors 1 bitcoin_vanity 1 coming-soon 1 omniauth_amazon 1 hiera 1 mcollective-client 1 wicked 1 kelredd-pruview 1 sqlite3-ruby 1 thin 1 matestack-ui-core 1 restforce 1 solidus_auth_devise 1 blazer 1 resque-scheduler 1 rswag 1 pdf_info 1 inline_svg 1 message_bus 1 shrine 1 omniauth-auth0 1 spree_api 1 omniauth-apple 1 audited 1 govuk_tech_docs 1 point-cli 1 openshift-origin-node 1 lean-ruport 1 flash_tool 1 tweetstream 1 ftpd 1 devise_invitable 1