
decidim
A generator and multiple gems made with Ruby on Rails.
Security Advisories for decidim in rubygems
High
about 1 year ago
Decidim has a cross-site scripting vulnerability in the version control page
rubygems
decidim
Moderate
about 1 year ago
Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editor
rubygems
decidim
Moderate
about 1 year ago
Decidim vulnerable to data disclosure through the embed feature
rubygems
decidim
Moderate
over 1 year ago
Cross-site scripting (XSS) in the dynamic file uploads
rubygems
decidim-core, decidim
Moderate
over 1 year ago
Possibility to circumvent the invitation token expiry period
rubygems
decidim-system, decidim-admin, decidim, devise_invitable
High
almost 2 years ago
Decidim has broken access control in templates
rubygems
decidim, decidim-templates
Moderate
about 2 years ago
Decidim Cross-site Scripting vulnerability in the external link redirections
rubygems
decidim, decidim-core
High
about 2 years ago
Decidim Cross-site Scripting vulnerability in the processes filter
rubygems
decidim-core, decidim
High
about 2 years ago
Decidim vulnerable to sensitive data disclosure
rubygems
decidim-meetings, decidim