Heartcombo Devise vulnerabilities
- heartcombo devise Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler 6.1 Medium
- heartcombo devise Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to 6.0 Medium
- heartcombo devise Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie 7.5 High