CVE-2026-45376
1 advisory.
RubyGems/decidim-admin CVE-2026-45376: medium 6.8, EPSS 0.60%
Decidim: Admin user search allows SQL injection through similarity-based sorting
Action: Upgrade decidim-admin to 0.30.9 or later.
bundle update decidim-adminAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.9 | - |
| 0.31.0.rc1 | 0.31.5 | - |
| 0.32.0.rc1 | 0.32.0 | - |
Fixed versions
| 0.30.9 | 0.31.5 | 0.32.0 |
Sources
- osv: GHSA-jvqq-cvh4-xm37
- https://github.com/decidim/decidim/security/advisories/GHSA-jvqq-cvh4-xm37
- https://github.com/decidim/decidim/pull/16668
- https://github.com/decidim/decidim
CVE-2026-45376 · published · modified · JSON