Skip to content
OpenAdvisories

Package · RubyGems

decidim-core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-23891

    Decidim has a Cross-site scripting (XSS) vulnerability via user name field

    Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who pass…

    decidim decidim decidim-core RubyGems