decidim-admin vulnerabilities

CVEs whose affected-version data names the decidim-admin package (rubygems). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-45376Medium· 5.5

1mo ago

Decidim is a participatory democracy framework

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the GET /admin/organization/users search interpolates params[:term] into raw Arel.sql ORDER BY similarity ex…

▾ Sunlitdecidim-admin · decidim-adminEPSS 0.34%via NVD