spree_auth_devise vulnerabilities (RubyGems)

2 vulnerabilities.

• spree_auth_devise RubyGems Authentication Bypass by CSRF Weakness CVE-2021-41275 Fix available 9.3 CriticalNovember 17, 2021
• spree_auth_devise RubyGems spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles CVE-2013-2506 Fix available 4.0 MediumMarch 8, 2013