Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/spina@2.11.0
purl pkg:gem/spina@2.11.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4u2v-fy8u-vqbh
Aliases:
CVE-2024-7106
GHSA-wqw3-p83g-r24v
Cross-Site Request Forgery in Spina A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272431. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T19:32:17.992578+00:00 GHSA Importer Affected by VCID-4u2v-fy8u-vqbh https://github.com/advisories/GHSA-wqw3-p83g-r24v 38.6.0