decidim-admin vulnerabilities (RubyGems)

4 vulnerabilities.

• decidim-admin RubyGems Decidim: Admin user search allows SQL injection through similarity-based sorting CVE-2026-45376 Fix available 5.5 MediumJuly 13, 2026
• decidim-admin RubyGems Cross-site scripting (XSS) in the decidim admin activity log CVE-2024-32034 Fix available 6.8 MediumSeptember 16, 2024
• decidim-admin RubyGems Decidim cross-site scripting (XSS) in the admin panel CVE-2024-27095 Fix available 5.4 MediumJuly 10, 2024
• decidim-admin RubyGems Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period CVE-2023-48220 Fix available 5.7 MediumFebruary 20, 2024