Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/spina@2.10.0
purl pkg:gem/spina@2.10.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-4u2v-fy8u-vqbh
Aliases:
CVE-2024-7106
GHSA-wqw3-p83g-r24v
Cross-Site Request Forgery in Spina A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272431. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. There are no reported fixed by versions.
VCID-w7p9-vg75-8qfc
Aliases:
CVE-2023-3445
GHSA-97wh-6hmj-g8j9
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.
2.15.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T05:15:11.404254+00:00 GitLab Importer Affected by VCID-4u2v-fy8u-vqbh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/spina/CVE-2024-7106.yml 38.6.0
2026-06-06T03:53:05.089143+00:00 GitLab Importer Affected by VCID-w7p9-vg75-8qfc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/spina/CVE-2023-3445.yml 38.6.0
2026-06-04T19:32:17.987580+00:00 GHSA Importer Affected by VCID-4u2v-fy8u-vqbh https://github.com/advisories/GHSA-wqw3-p83g-r24v 38.6.0