RubyGems CVE Archive

avo CVE Vulnerabilities

All known CVEs affecting avo. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-55518
Avo: Missing Authorization in Avo Association Attach Endpoint Allows…
Critical
CVE-2026-42205
Avo: Broken Access Control Through Unauthorized Execution of Arbitrary Action…
High
CVE-2024-22411
Cross-site scripting (XSS) in Action messages on Avo
Medium
CVE-2024-22191
avo vulnerable to stored cross-site scripting (XSS) in key_value field
High
CVE-2023-34102
avo possible unsafe reflection / partial DoS vulnerability
High
CVE-2023-34103
avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields
High

Prioritize avo vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo