spree vulnerabilities (RubyGems)

8 vulnerabilities.

• spree RubyGems Spree: CSV Formula Injection in Customer Export GHSA-xf4v-w5x5-pv79 Fix available 5.2 MediumJune 4, 2026
• spree RubyGems Spreecommerce < 0.50.x API RCE CVE-2011-10026 Public exploitFix available 9.3 CriticalAugust 20, 2025
• spree RubyGems Spreecommerce < 0.60.2 Search Parameter RCE CVE-2011-10019 Public exploitFix available 10.0 CriticalAugust 13, 2025
• spree RubyGems Expired token reuse in Spree CVE-2020-15269 Fix available 7.4 HighOctober 20, 2020
• spree RubyGems Spree Improper Input Validation vulnerability CVE-2013-1656 Fix available 4.3 MediumMarch 8, 2013
• spree RubyGems Spree uses a hardcoded hash value CVE-2008-7311 Fix available 5.0 MediumApril 4, 2012
• spree RubyGems Spree does not properly restrict the use of a hash to provide values for a model's attributes CVE-2008-7310 Fix available 5.0 MediumApril 4, 2012
• spree RubyGems Spree allows remote attackers to obtain sensitive information CVE-2010-3978 Fix available 5.0 MediumNovember 17, 2010