Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

spree_api

rubygems

Spree's API

View on github.com · View on rubygems.org

Security Advisories for spree_api in rubygems

High
6 months ago

Unauthenticated Spree Commerce users can access all guest addresses GSA_kwCzR0hTQS04N2ZoLXJjOTYtNmZyNs4ABSAF

rubygems spree_api
Moderate
7 months ago

Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification GSA_kwCzR0hTQS1nMjY4LTcycDctOWo2as4ABQ3g

rubygems spree_api
High
almost 6 years ago

Authorization bypass in Spree MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW0yanItaG1jMy1xbXBy

rubygems spree_api
Potential
High
almost 6 years ago

Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY4Y20tMzY0Zi1xOXFo

rubygems spree
Potential
Moderate
almost 9 years ago

Spree Improper Input Validation vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4eDgtdjgzdi1yaHcz

rubygems spree

Filter by Severity

High 3 Moderate 2