Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/administrate@0.1.3
purl pkg:gem/administrate@0.1.3
Next non-vulnerable version 0.13.0
Latest non-vulnerable version 0.13.0
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-kzh6-upd9-9fdk
Aliases:
CVE-2020-5257
GHSA-2p5p-m353-833w
0.13.0
Affected by 0 other vulnerabilities.
VCID-rbwg-j7hh-9yan
Aliases:
CVE-2016-3098
GHSA-cc8c-26rj-v2vx
Cross-site request forgery `Administrate::ApplicationController` actions don't have CSRF protection. Remote attackers can hijack user's sessions and use any functionality that administrate exposes on their behalf.
0.1.5
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T10:17:01.184057+00:00 Ruby Importer Affected by VCID-kzh6-upd9-9fdk https://github.com/rubysec/ruby-advisory-db/blob/master/gems/administrate/CVE-2020-5257.yml 38.6.0
2026-05-31T09:35:13.501903+00:00 GitLab Importer Affected by VCID-rbwg-j7hh-9yan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/administrate/CVE-2016-3098.yml 38.6.0