Search for packages
| purl | pkg:gem/solidus_auth_devise@2.5.4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-s8v3-x2z9-juhk
Aliases: CVE-2021-41274 GHSA-xm34-v85h-9pg2 |
Cross-Site Request Forgery (CSRF) solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem.Configured to use `:null_session` or `:reset_session` strategies (`:null_session` is the default in case the no strategy is given, but `rails --new` generated skeleton use `:exception`). | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-s8v3-x2z9-juhk | Cross-Site Request Forgery (CSRF) solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem.Configured to use `:null_session` or `:reset_session` strategies (`:null_session` is the default in case the no strategy is given, but `rails --new` generated skeleton use `:exception`). |
CVE-2021-41274
GHSA-xm34-v85h-9pg2 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-05T21:15:40.153627+00:00 | GHSA Importer | Fixing | VCID-s8v3-x2z9-juhk | https://github.com/advisories/GHSA-xm34-v85h-9pg2 | 38.6.0 |
| 2026-06-04T18:12:39.919971+00:00 | Ruby Importer | Affected by | VCID-s8v3-x2z9-juhk | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_auth_devise/CVE-2021-41274.yml | 38.6.0 |
| 2026-06-04T18:12:39.843294+00:00 | Ruby Importer | Fixing | VCID-s8v3-x2z9-juhk | https://github.com/rubysec/ruby-advisory-db/blob/master/gems/solidus_auth_devise/CVE-2021-41274.yml | 38.6.0 |
| 2026-06-04T17:33:01.514759+00:00 | GithubOSV Importer | Fixing | VCID-s8v3-x2z9-juhk | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/11/GHSA-xm34-v85h-9pg2/GHSA-xm34-v85h-9pg2.json | 38.6.0 |
| 2026-06-02T04:40:31.905258+00:00 | GitLab Importer | Fixing | VCID-s8v3-x2z9-juhk | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/solidus_auth_devise/CVE-2021-41274.yml | 38.6.0 |