CVE-2026-45414
1 advisory.
RubyGems/decidim CVE-2026-45414: high 8.5, EPSS 0.45%
Decidim: JWT-backed authentication can be replayed across organizations
Action: Upgrade decidim to 0.31.5 or later.
bundle update decidimAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.31.5 | - |
| 0.32.0.rc1 | 0.32.0 | - |
Fixed versions
| 0.31.5 | 0.32.0 |
Sources
- osv: GHSA-r3v7-5x4c-c69q
- https://github.com/decidim/decidim/security/advisories/GHSA-r3v7-5x4c-c69q
- https://github.com/decidim/decidim/pull/16673
- https://github.com/decidim/decidim/pull/16756
- https://github.com/decidim/decidim
CVE-2026-45414 · published · modified · JSON