Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

spina

3 known vulnerabilities (1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium, 1 low
Registry
RubyGems

Advisories 3

  • CVE-2024-7106Medium 6.9

    Spina CMS media_folders cross-site request forgery

    Affected: through 2.18.0.

  • Cross-site Scripting (XSS) - Stored in spinacms/spina

    Affected: fixed in 2.15.1.

  • Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.

    Affected: fixed in 0.6.29.