ruby-devise vulnerabilities (Debian)
5 vulnerabilities.
-
ruby-deviseDebian Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler 6.1 Medium -
ruby-deviseDebian Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to 6.0 Medium -
ruby-deviseDebian Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie 7.5 High -
ruby-deviseDebian devise Time-of-check Time-of-use Race Condition vulnerability 9.8 Critical -
ruby-deviseDebian Devise does not properly perform type conversion when performing database queries 6.8 Medium