Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
rubygems spree_auth_devise Security Advisories
Browse all Security Advisories for rubygems spree_auth_devise
Loading...
Moderate
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
GSA_kwCzR0hTQS1qcDU3LTlqMzctNTQ3Ns4AAfSa
spree_auth_devise allows remote authenticated users to assign themselves arbitrary rolesEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
GSA_kwCzR0hTQS1ncHFjLTRwcDctNTk1NM0XVQ
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
GSA_kwCzR0hTQS04eGZ3LTVxODItMzY1Ms0XVA
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
GSA_kwCzR0hTQS02bXFyLXE4NnEtNmd3cs0XUw
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
Critical
Ecosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
GSA_kwCzR0hTQS0yNnh4LW00cTIteGhxOM0XUg
Authentication Bypass by CSRF WeaknessEcosystems: rubygems
Packages: spree_auth_devise
Source: GitHub Advisory Database
Blast Radius: 31.4
Published: about 3 years ago
Statistics
Advisories: 21,164
Packages: 9,230
Repositories: 2
Ecosystems: 12
Packages: 9,230
Repositories: 2
Ecosystems: 12
Filter by Severity
Filter by Ecosystem
Filter by Package
actionpack
61
nokogiri
43
rubygems-update
25
rack
23
puppet
23
activerecord
21
rails-html-sanitizer
14
publify_core
14
activesupport
14
camaleon_cms
14
passenger
13
puma
12
actionview
12
decidim
11
rails
11
fat_free_crm
10
org.webjars:bootstrap
9
bootstrap
9
bootstrap
9
jquery-rails
9
twbs/bootstrap
9
bootstrap
9
org.webjars.npm:jquery
8
jquery
8
bootstrap-sass
8
jQuery
7
rexml
7
jquery-ui-rails
7
bootstrap.sass
7
jQuery.UI.Combined
7
org.jruby:jruby-stdlib
7
org.webjars.npm:jquery-ui
7
jquery-ui
7
katello
6
ember-source
6
doorkeeper
6
loofah
6
grpcio
5
spree_auth_devise
5
grpc
5
spree
5
commonmarker
5
bundler
5
bootstrap-sass
5
sinatra
5
sidekiq
5
webrick
5
sanitize
4
devise
4
carrierwave
4
dragonfly
4
activestorage
4
avo
4
ruby-saml
4
mail
4
fluentd
4
rails_admin
4
rest-client
3
private_address_check
3
devise-two-factor
3
io.grpc:grpc-protobuf
3
json-jwt
3
phlex
3
spina
3
rack-cors
3
openssl
3
decidim-admin
3
activeadmin
3
decidim-core
3
rubyzip
3
cgi
3
gollum
3
git
3
yard
3
actiontext
3
geminabox
3
resque
3
rdoc
3
com.google.protobuf:protobuf-java
3
openc3
3
chartkick
3
google-protobuf
3
com.google.protobuf:protobuf-kotlin
3
openc3
3
omniauth
3
VladTheEnterprising
2
com.google.protobuf:protobuf-kotlin-lite
2
sidekiq-unique-jobs
2
org.webjars.npm:bootstrap
2
sprockets
2
solidus_core
2
twitter-bootstrap-rails
2
solidus_frontend
2
user_agent_parser
2
sup
2
mapbox-rails
2
mapbox.js
2
qiita-markdown
2
yajl-ruby
2
httparty
2
omniauth-saml
2
uri
2
logstash-core
2
administrate
2
safemode
2
maximebf/debugbar
2
bson
2
echor
2
radiant
2
kramdown
2
view_component
2
pwpush
2
field_test
2
i18n
2
redcarpet
2
decidim-meetings
2
@openc3/tool-common
2
secure_headers
2
omniauth-facebook
2
decidim-templates
2
paperclip
2
red-arrow
2
pyarrow
2
kaminari
2
net-ldap
2
cocoapods-downloader
2
com.google.protobuf:protobuf-javalite
2
git-fastclone
2
mini_magick
2
facter
2
actionmailer
2
mechanize
2
faye
2
pghero
2
pdfkit
2
pageflow
2
json
2
ruby-openid
2
ox
2
em-http-request
1
geokit-rails
1
spree_api
1
dependabot-common
1
activejob
1
railties
1
audited
1
iodine
1
sqlite-vec
1
sqlite-vec
1
sqlite-vec
1
sqlite-vec
1
active-support
1
diffy
1
will_paginate
1
twitter-stream
1
datagrid
1
simple_captcha2
1
svg_optimizer
1
http
1
trestle-auth
1
protocol-http1
1
tweetstream
1
jmespath
1
text_helpers
1
request_store
1
omniauth-apple
1
redis-store
1
omniauth_amazon
1
coming-soon
1
bitcoin_vanity
1
capistrano-colors
1
doge-coin
1
awesome-bot
1
blockchain_wallet
1
coin_base
1
cron_parser
1
curl
1
omniauth-oauth2
1
kredis
1
ldap_fluff
1
easymon
1
sfpagent
1
web-console
1
rake
1
clearance
1
fog-dragonfly
1
date
1
awesome_spawn
1
minitar
1
archive-tar-minitar
1
chartkick
1
karteek-docsplit
1
features
1
ruby_parser
1
gtk2
1
better_errors
1
recurly
1
colorscore
1
sqlite3-ruby
1
cap-strap
1