4 known security vulnerabilities

  • moderateGHSA-57hq-95w6-v4fc(CVE-2026-32700)

    Devise has a confirmable "change email" race condition permits user to confirm email they have no access to

Show 3 more vulnerabilities
3 moderate
  • moderateGHSA-73rf-6mrf-759q(CVE-2019-5421)

    devise Time-of-check Time-of-use Race Condition vulnerability

  • moderateGHSA-fcjw-8rhj-gwwc(CVE-2019-16109)

    Authentication Bypass in Devise

  • moderateGHSA-jp94-3292-c3xv(CVE-2026-40295)

    Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler

Flexible authentication solution for Rails with Warden

Required Ruby Version

>= 1.9.3

Authors

José Valim, Carlos Antônio

Versions

  1. 5.0.4

    1. source

      1. 5.0.4 source May 08, 2026 (86 KB)
  2. 5.0.3

    1. source

      1. 5.0.3 source March 16, 2026 (85.5 KB)
  3. 5.0.2

    1. source

      1. 5.0.2 source February 18, 2026 (85 KB)
  4. 5.0.1

    1. source

      1. 5.0.1 source February 13, 2026 (85 KB)
  5. 5.0.0

    1. source

      1. 5.0.0 source January 23, 2026 (85 KB)
  6. 3.5.8

    1. source

      1. 3.5.8 source April 25, 2016 (171 KB)
Show all versions (180 total)

SHA 256 checksum

← Previous version Next version →