{"action":"Upgrade solidus_frontend to 2.11.14 or later.","affected":[{"fixed":"2.11.14","introduced":"0"},{"fixed":"3.0.5","introduced":"3.0.0"},{"fixed":"3.1.5","introduced":"3.1.0"}],"component":"solidus_frontend","cve_ids":["CVE-2021-43846"],"ecosystem":"RubyGems","epss":0.00594,"exploited":false,"fixed_versions":["2.11.14","3.0.5","3.1.5"],"ghsa_id":"GHSA-h3fg-h5v3-vf8m","id":"tcs_01M5KEKFZ6HX6K937H342G8P63","modified_at":"2026-07-08T06:30:02.204013207Z","published_at":"2022-01-06T18:33:44Z","references":["https://osv.dev/vulnerability/GHSA-h3fg-h5v3-vf8m","https://github.com/solidusio/solidus/security/advisories/GHSA-h3fg-h5v3-vf8m","https://nvd.nist.gov/vuln/detail/CVE-2021-43846","https://github.com/solidusio/solidus/commit/4d17cacf066d9492fc04eb3a0b16084b47376d81","https://github.com/solidusio/solidus/commit/a1b9bf7f24f9b8684fc4d943eacb02b1926c77c6","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_frontend/CVE-2021-43846.yml","https://github.com/solidusio/solidus"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h3fg-h5v3-vf8m","url":"https://osv.dev/vulnerability/GHSA-h3fg-h5v3-vf8m"}],"summary":"CSRF forgery protection bypass in solidus_frontend"}