Skip to content
OpenAdvisories

Package · RubyGems

decidim-verifications

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-45378

    Decidim: Verification documents can be downloaded through reusable links

    Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin UI embeds verification_attachment blobs through reusable signed Active Storage disk URLs,…

    decidim decidim decidim-verifications RubyGems