devise Security Advisories - Rubygems | Ecosyste.ms: Advisories

devise

Flexible authentication solution for Rails with Warden

View on github.com · View on rubygems.org

Security Advisories for devise in rubygems

Moderate

3 months ago

Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler GSA_kwCzR0hTQS1qcDk0LTMyOTItYzN4ds4ABWfC

rubygems devise

Moderate

5 months ago

Devise has a confirmable "change email" race condition permits user to confirm email they have no access to GSA_kwCzR0hTQS01N2hxLTk1dzYtdjRmY84ABTwT

rubygems devise

High

over 3 years ago

Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie GSA_kwCzR0hTQS03NDZnLTNnZnAtaGZod84AAxNH

rubygems devise

Moderate

almost 7 years ago

Authentication Bypass in Devise MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjanctOHJoai1nd3dj

rubygems devise

Moderate

over 7 years ago

devise Time-of-check Time-of-use Race Condition vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTczcmYtNm1yZi03NTlx

rubygems devise

Moderate

almost 9 years ago

Devise does not properly perform type conversion when performing database queries MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4aHctbWc4bS0ycGo4

rubygems devise

Filter by Severity

Moderate 5 High 1