decidim (RubyGems) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package decidim, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (12)

• CVE-2023-36465 — CVSS 9.1 (critical): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2023-34089 — CVSS 8.1 (high): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2023-32693 — CVSS 8.1 (high): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2023-34090 — CVSS 7.5 (high): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2024-32469 — CVSS 7.1 (high): Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack…
• CVE-2024-41673 — CVSS 7.1 (high): Decidim is a participatory democracy framework. The version control feature used in resources is subject to potential XSS attack through a…
• CVE-2025-65017 — CVSS 6.5 (medium): Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private…
• CVE-2023-51447 — CVSS 6.3 (medium): Decidim is a participatory democracy framework. Starting in version 0.27.0 and prior to versions 0.27.5 and 0.28.0, the dynamic file upload…
• CVE-2023-48220 — CVSS 5.7 (medium): Decidim is a participatory democracy framework. Starting in version 0.4.rc3 and prior to version 2.0.9 of the `devise_invitable` gem, the…
• CVE-2024-39910 — CVSS 5.4 (medium): decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organizations. The WYSWYG…
• CVE-2024-27090 — CVSS 5.3 (medium): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2023-47634 — CVSS 3.1 (low): Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race…