{"action":"Upgrade devise to 3.5.4 or later.","affected":[{"fixed":"3.5.4","introduced":"0"}],"component":"devise","cve_ids":["CVE-2015-8314"],"ecosystem":"RubyGems","epss":0.00618,"exploited":false,"fixed_versions":["3.5.4"],"ghsa_id":"GHSA-746g-3gfp-hfhw","id":"tcs_01M5KEHH0RGS1A747EKGBG469T","modified_at":"2026-02-04T02:28:40.782506Z","published_at":"2023-01-26T23:54:07Z","references":["https://osv.dev/vulnerability/GHSA-746g-3gfp-hfhw","https://nvd.nist.gov/vuln/detail/CVE-2015-8314","https://github.com/heartcombo/devise/commit/c92996646aba2d25b2c3e235fe0c4f1a84b70d24","https://github.com/advisories/GHSA-746g-3gfp-hfhw","https://github.com/heartcombo/devise","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/devise/CVE-2015-8314.yml","https://rubysec.com/advisories/CVE-2015-8314","http://blog.plataformatec.com.br/2016/01/improve-remember-me-cookie-expiration-in-devise"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-746g-3gfp-hfhw","url":"https://osv.dev/vulnerability/GHSA-746g-3gfp-hfhw"}],"summary":"Devise Gem for Ruby Unauthorized Access Using \"Remember Me\" Cookie"}