Skip to content
OpenAdvisories

Package · RubyGems

decidim

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    Decidim has race condition in Endorsements

    Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement. To explo…