Search for packages
| purl | pkg:gem/solidus_core@2.11.13 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qss2-pgck-eybx
Aliases: CVE-2021-43846 GHSA-h3fg-h5v3-vf8m |
CSRF forgery protection bypass in solidus_frontend |
Affected by 1 other vulnerability. Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-s3ju-k74e-1fbh
Aliases: CVE-2022-31000 GHSA-8639-qx56-r428 |
solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's adjustments if they hold its number, and the execution happens on a store administrator's computer. Users should upgrade to solidus_backend 3.1.6, 3.0.6, or 2.11.16 to receive a patch. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-hzdm-3uza-tuah | ReDos vulnerability on guest checkout email validation |
CVE-2021-43805
GHSA-qxmr-qxh6-2cc9 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T18:24:58.354513+00:00 | GitLab Importer | Affected by | VCID-s3ju-k74e-1fbh | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/solidus_core/CVE-2022-31000.yml | 38.6.0 |
| 2026-06-12T17:54:39.568124+00:00 | GitLab Importer | Affected by | VCID-qss2-pgck-eybx | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/solidus_core/CVE-2021-43846.yml | 38.6.0 |
| 2026-06-12T15:42:52.823180+00:00 | GitLab Importer | Fixing | VCID-hzdm-3uza-tuah | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/solidus_core/CVE-2021-43805.yml | 38.6.0 |
| 2026-06-12T08:03:57.924084+00:00 | GithubOSV Importer | Fixing | VCID-hzdm-3uza-tuah | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/12/GHSA-qxmr-qxh6-2cc9/GHSA-qxmr-qxh6-2cc9.json | 38.6.0 |
| 2026-06-11T20:27:15.252845+00:00 | GHSA Importer | Fixing | VCID-hzdm-3uza-tuah | https://github.com/advisories/GHSA-qxmr-qxh6-2cc9 | 38.6.0 |