Skip to content
OpenAdvisories

Package · RubyGems

solidus_core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-43805

    ReDos vulnerability on guest checkout email validation

    Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest or…

    solidusio solidus solidus_core RubyGems
  • Critical 9.3
    GHSA-5629-8855-gf4g

    Authentication Bypass by CSRF Weakness

    ### Impact The actual vulnerability has been discovered on `solidus_auth_devise`. See [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2) for details. The security advisory here exists to provide an …

    solidus_core RubyGems