Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/solidus_auth_devise@2.4.0
purl pkg:gem/solidus_auth_devise@2.4.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-s8v3-x2z9-juhk
Aliases:
CVE-2021-41274
GHSA-xm34-v85h-9pg2
Cross-Site Request Forgery (CSRF) solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem.Configured to use `:null_session` or `:reset_session` strategies (`:null_session` is the default in case the no strategy is given, but `rails --new` generated skeleton use `:exception`).
2.5.4
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T01:09:52.245865+00:00 GitLab Importer Affected by VCID-s8v3-x2z9-juhk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/solidus_auth_devise/CVE-2021-41274.yml 38.6.0
2026-06-04T18:12:39.816854+00:00 Ruby Importer Affected by VCID-s8v3-x2z9-juhk https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_auth_devise/CVE-2021-41274.yml 38.6.0