{"action":"Upgrade rails_multisite to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"rails_multisite","cve_ids":["CVE-2021-41263"],"ecosystem":"RubyGems","epss":0.00628,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-844m-cpr9-jcmh","id":"tcs_01M5KEHVNF78YZ42E3KWZGWKBK","modified_at":"2026-07-08T06:28:21.002220346Z","published_at":"2021-11-15T17:54:01Z","references":["https://osv.dev/vulnerability/GHSA-844m-cpr9-jcmh","https://github.com/discourse/rails_multisite/security/advisories/GHSA-844m-cpr9-jcmh","https://nvd.nist.gov/vuln/detail/CVE-2021-41263","https://github.com/discourse/rails_multisite/commit/c6785cdb5c9277dd2c5ac8d55180dd1ece440ed0","https://github.com/discourse/rails_multisite","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails_multisite/CVE-2021-41263.yml"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-844m-cpr9-jcmh","url":"https://osv.dev/vulnerability/GHSA-844m-cpr9-jcmh"}],"summary":"Rails Multisite secure/signed cookies share secrets between sites in a multi-site application"}