MEDIUM5.4RubyGems
GHSA-529p-jj47-w3m3· CVE-2024-27095Decidim cross-site scripting (XSS) in the admin panel
Modified: 9/10/2026
package
RubyGems/decidim-admin
pkg:rubygems/decidim-admin
MEDIUM6.8RubyGems
GHSA-jvqq-cvh4-xm37· CVE-2026-45376Decidim: Admin user search allows SQL injection through similarity-based sorting
Modified: 7/13/2026
MEDIUM6.8RubyGems
GHSA-rx9f-5ggv-5rh6· CVE-2024-32034Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity log
Modified: 9/17/2024
MEDIUM5.7RubyGems
GHSA-w3q8-m492-4pwp· CVE-2023-48220Possibility to circumvent the invitation token expiry period
Modified: 9/10/2026