4 known security vulnerabilities

  • moderateGHSA-529p-jj47-w3m3(CVE-2024-27095)

    Decidim cross-site scripting (XSS) in the admin panel

Show 3 more vulnerabilities
3 moderate
  • moderateGHSA-jvqq-cvh4-xm37(CVE-2026-45376)

    Decidim: Admin user search allows SQL injection through similarity-based sorting

  • moderateGHSA-rx9f-5ggv-5rh6(CVE-2024-32034)

    Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity log

  • moderateGHSA-w3q8-m492-4pwp(CVE-2023-48220)

    Possibility to circumvent the invitation token expiry period

Organization administration to manage a single organization.

Required Ruby Version

>= 2.6

Authors

Josep Jaume Rey Peroy, Marc Riera Casals, Oriol Gual Oliva

Versions

  1. 0.32.1

    1. source

      1. 0.32.1 source July 30, 2026 (586 KB)
  2. 0.32.0

    1. source

      1. 0.32.0 source July 02, 2026 (585 KB)
  3. 0.32.0.rc3

    1. source

      1. 0.32.0.rc3 source June 02, 2026 (584 KB)
  4. 0.32.0.rc2

    1. source

      1. 0.32.0.rc2 source May 12, 2026 (584 KB)
  5. 0.32.0.rc1

    1. source

      1. 0.32.0.rc1 source April 24, 2026 (571 KB)
  6. 0.23.6

    1. source

      1. 0.23.6 source May 10, 2021 (579 KB)
Show all versions (183 total)

Pushed by

mrcasals

SHA 256 checksum

← Previous version Next version →