MEDIUM5.4RubyGems
GHSA-3h7v-wqw7-ff28· BIT-publify-2021-25975, CVE-2021-25975Cross site scripting in publify
Modified: 12/6/2023
package
RubyGems/publify_core
pkg:rubygems/publify_core
CRITICAL9.1RubyGems
GHSA-3hwx-c6cp-q972· BIT-publify-2022-1811, CVE-2022-1811Publify vulnerable to cross site scripting
Modified: 2/16/2024
MEDIUM4.9RubyGems
GHSA-5jm7-g527-m694· BIT-publify-2022-1553, CVE-2022-1553Publify exposes article metadata
Modified: 2/16/2024
MEDIUM6.5RubyGems
GHSA-79m3-q3wh-c3qm· BIT-publify-2022-0574, CVE-2022-0574Publify Incorrect Authorization
Modified: 2/16/2024
MEDIUM6.5RubyGems
GHSA-79wq-g4v9-gfj4· BIT-publify-2022-2815, CVE-2022-2815Publify Core does not strip metadata from images
Modified: 12/6/2023
LOWRubyGems
GHSA-8fm5-gg2f-f66q· CVE-2024-39311Publify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction
Modified: 9/10/2026
MEDIUM4.3RubyGems
GHSA-c273-c6vg-4pv5· BIT-publify-2022-1810, CVE-2022-1810Publify has Improper Access Controls
Modified: 2/16/2024
MEDIUM6.5RubyGems
GHSA-g7gf-2rqw-5rwx· BIT-publify-2023-0569, CVE-2023-0569Publify contains Weak Password Requirements
Modified: 12/6/2023
CRITICAL9.8RubyGems
GHSA-q3rm-f527-ghxj· BIT-publify-2023-0299, CVE-2023-0299Publify Improper Input Validation vulnerability
Modified: 12/6/2023
CRITICAL9.8RubyGems
GHSA-rc42-jghf-vr8f· BIT-publify-2022-1812, CVE-2022-1812Integer overflow in publify_core
Modified: 12/6/2023
HIGH7.5RubyGems
GHSA-vq74-9583-hrm4· CVE-2014-3211Publify vulnerable to DoS attack
Modified: 11/8/2023
MEDIUM6.5RubyGems
GHSA-w78q-4w34-jrjx· BIT-publify-2022-0578, CVE-2022-0578Publify vulnerable to code injection
Modified: 2/16/2024
MEDIUM5.4RubyGems
GHSA-wmh9-x28j-c6gr· BIT-publify-2021-25974, CVE-2021-25974Cross site scripting in publify
Modified: 12/6/2023
MEDIUM6.5RubyGems
GHSA-x24j-87x9-jvv5· BIT-publify-2021-25973, CVE-2021-25973Publify `guest` role users can self-register even when the admin does not allow it
Modified: 2/16/2024
HIGH7.5RubyGems
GHSA-x3rq-r3cm-5vc4· BIT-publify-2022-0524, CVE-2022-0524Publify Business Logic Errors
Modified: 2/16/2024