pkg:RubyGems/decidim-core
6 total CVEsHIGH3MEDIUM2
✅ Check your installed version
All known vulnerabilities
HIGH8.7CVE-2026-23891Decidim has a cross-site scripting (XSS) in user name >= 0.31.0.rc1, < 0.31.1
HIGH8.1CVE-2023-34089Decidim Cross-site Scripting vulnerability in the processes filter >= 0.14.0, < 0.26.7
HIGH7.5CVE-2026-40869Decidim amendments can be accepted or rejected by anyone >= 0.31.0.rc1, < 0.31.1
MEDIUM6.3Cross-site scripting (XSS) in the dynamic file uploads
>= 0.27.0, < 0.27.5
MEDIUM6.1Decidim Cross-site Scripting vulnerability in the external link redirections
>= 0.27.0, < 0.27.3
—Decidim's private data exports can lead to data leaks
>= 0.30.0, < 0.30.4