pkg:RubyGems/devise

All known vulnerabilities

• CRITICAL9.8CVE-2019-5421devise Time-of-check Time-of-use Race Condition vulnerability
  from 0, < 4.6.0
• HIGH7.5CVE-2015-8314Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie
  from 0, < 3.5.4
• MEDIUM6.1CVE-2026-40295Devise has an Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler
  from 0, < 5.0.4
• MEDIUM5.3Devise has a confirmable "change email" race condition permits user to confirm email they have no access to
  from 0, < 5.0.3
• MEDIUM5.3Authentication Bypass in Devise
  from 0, < 4.7.1
• —Devise does not properly perform type conversion when performing database queries
  >= 2.2.0, < 2.2.3