ruby-devise vulnerabilities (Ubuntu)
4 vulnerabilities.
-
ruby-deviseUbuntu Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler 6.1 Medium -
ruby-deviseUbuntu Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to 6.0 Medium -
ruby-deviseUbuntu Authentication Bypass in Devise 5.3 Medium -
ruby-deviseUbuntu devise Time-of-check Time-of-use Race Condition vulnerability 9.8 Critical