decidim-templates (RubyGems) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the RubyGems package decidim-templates, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-36465 — CVSS 9.1 (critical): Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and…
• CVE-2023-47635 — CVSS 4.5 (medium): Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity…