VulnerableCode Package Details - pkg:gem/devise@2.1.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:gem/devise@2.1.0

Essentials
History (1)

purl	pkg:gem/devise@2.1.0

Next non-vulnerable version	2.1.3
Latest non-vulnerable version	4.6.0
Risk

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-pxuq-hc2x-cbh4 Aliases: CVE-2013-0233	Devise Database Type Conversion Crafted Request Parsing Security Bypass Using a specially crafted request, an attacker could trick the database type conversion code to return incorrect records. For some token values this could allow an attacker to bypass the proper checks and gain control of other accounts.	2.1.3 Affected by 0 other vulnerabilities. 2.2.3 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-pxuq-hc2x-cbh4
Aliases:
CVE-2013-0233

Devise Database Type Conversion Crafted Request Parsing Security Bypass Using a specially crafted request, an attacker could trick the database type conversion code to return incorrect records. For some token values this could allow an attacker to bypass the proper checks and gain control of other accounts.

2.1.3
Affected by 0 other vulnerabilities.

2.2.3
Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-02T04:36:09.220898+00:00	GitLab Importer	Affected by	VCID-pxuq-hc2x-cbh4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/devise/CVE-2013-0233.yml	38.6.0