VulnerableCode Package Details - pkg:gem/spree@4.0.4

Search for packages

Vulnerability	Summary	Fixed by
VCID-8mxp-3pu4-uqg8 Aliases: CVE-2020-15269 GHSA-f8cm-364f-q9qh	Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls	4.1.11 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-tkvr-997w-7qe7 Aliases: GHSA-xf4v-w5x5-pv79	Spree: CSV Formula Injection in Customer Export	5.2.8 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 5.3.6 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 5.4.3 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-z4ke-cy5c-g7dd Aliases: CVE-2020-26223 GHSA-m2jr-hmc3-qmpr		4.0.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 4.1.12 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-8mxp-3pu4-uqg8
Aliases:
CVE-2020-15269
GHSA-f8cm-364f-q9qh

Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls

4.1.11
Affected by 3 other vulnerabilities.

VCID-tkvr-997w-7qe7
Aliases:
GHSA-xf4v-w5x5-pv79

Spree: CSV Formula Injection in Customer Export

5.2.8
Affected by 1 other vulnerability.

5.3.6
Affected by 1 other vulnerability.

5.4.3
Affected by 1 other vulnerability.

VCID-z4ke-cy5c-g7dd
Aliases:
CVE-2020-26223
GHSA-m2jr-hmc3-qmpr

4.0.5
Affected by 1 other vulnerability.

4.1.12
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-8mxp-3pu4-uqg8	Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls	CVE-2020-15269 GHSA-f8cm-364f-q9qh

Vulnerability

Summary

Aliases

VCID-8mxp-3pu4-uqg8

Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls

CVE-2020-15269
GHSA-f8cm-364f-q9qh

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-13T09:29:10.044276+00:00	Ruby Importer	Affected by	VCID-tkvr-997w-7qe7	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spree/GHSA-xf4v-w5x5-pv79.yml	38.6.0
2026-06-13T09:20:54.155855+00:00	Ruby Importer	Fixing	VCID-8mxp-3pu4-uqg8	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spree/CVE-2020-15269.yml	38.6.0
2026-06-13T09:20:53.355682+00:00	Ruby Importer	Affected by	VCID-8mxp-3pu4-uqg8	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spree/CVE-2020-15269.yml	38.6.0
2026-06-12T17:29:47.392813+00:00	GitLab Importer	Affected by	VCID-z4ke-cy5c-g7dd	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/spree/CVE-2020-26223.yml	38.6.0
2026-06-12T17:28:55.759640+00:00	GitLab Importer	Fixing	VCID-8mxp-3pu4-uqg8	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/spree/CVE-2020-15269.yml	38.6.0
2026-06-12T08:00:34.893706+00:00	GithubOSV Importer	Fixing	VCID-8mxp-3pu4-uqg8	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/10/GHSA-f8cm-364f-q9qh/GHSA-f8cm-364f-q9qh.json	38.6.0
2026-06-11T20:27:04.945332+00:00	GHSA Importer	Fixing	VCID-8mxp-3pu4-uqg8	https://github.com/advisories/GHSA-f8cm-364f-q9qh	38.6.0