Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Decidim MEDIUM 6.5
CVE-2026-40869

Decidim is a participatory democracy framework. Starting in version 0.19.0 and prior to versions 0.30.5 and 0.31.1, a vulnerability allows any regist…

Fix: 0.30.5 / 0.31.1+
Fix from $1,600 2026-04-21
Decidim HIGH 8.7
CVE-2026-23891

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the …

Fix: 0.30.5 / 0.31.1+
Fix from $1,950 2026-04-13
Decidim MEDIUM 6.5
CVE-2025-65017

Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data expor…

Fix: 0.30.4+
Fix from $1,600 2026-02-03
Decidim MEDIUM 5.4
CVE-2024-45594

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack t…

Fix: 0.28.3+
Fix from $1,600 2024-11-13
Decidim HIGH 7.4
CVE-2023-48220

Decidim is a participatory democracy framework. Starting in version 0.4.rc3 and prior to version 2.0.9 of the `devise_invitable` gem, the invites fea…

Fix: 0.26.9 / 0.27.5+
Fix from $1,950 2024-02-20
Decidim MEDIUM 5.7
CVE-2023-47635

Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check…

Fix: 0.27.5+
Fix from $1,600 2024-02-20
Decidim MEDIUM 5.4
CVE-2023-51447

Decidim is a participatory democracy framework. Starting in version 0.27.0 and prior to versions 0.27.5 and 0.28.0, the dynamic file upload feature i…

Fix: 0.27.5+
Fix from $1,600 2024-02-20
Decidim HIGH 7.1
CVE-2023-36465

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline p…

Fix: 0.26.8 / 0.27.4+
Fix from $1,950 2023-10-06
Decidim HIGH 7.5
CVE-2023-34090

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline p…

Fix: 0.27.3+
Fix from $1,950 2023-07-11
Decidim MEDIUM 6.1
CVE-2023-34089

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline p…

Fix: 0.26.7 / 0.27.3+
Fix from $1,600 2023-07-11
Decidim MEDIUM 6.1
CVE-2023-32693

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline p…

Fix: 0.26.7 / 0.27.3+
Fix from $1,600 2023-07-11