decidim vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-45414Highdecidim: Decidim: JWT-backed authentication can be replayed across organizations CVE-2025-65017Highdecidim-core: Decidim's private data exports can lead to data leaks CVE-2024-41673Highdecidim: Decidim has a cross-site scripting vulnerability in the version control page CVE-2024-39910Mediumdecidim: Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editor CVE-2024-32469Mediumdecidim: Decidim cross-site scripting (XSS) in the pagination CVE-2024-27090Mediumdecidim: Decidim vulnerable to data disclosure through the embed feature CVE-2023-51447Mediumdecidim: Cross-site scripting (XSS) in the dynamic file uploads CVE-2023-48220Mediumdecidim: Possibility to circumvent the invitation token expiry period CVE-2023-47634Lowdecidim: Race condition in Endorsements CVE-2023-36465Highdecidim: Decidim has broken access control in templates CVE-2023-32693Mediumdecidim-core: Decidim Cross-site Scripting vulnerability in the external link redirections CVE-2023-34089Highdecidim: Decidim Cross-site Scripting vulnerability in the processes filter CVE-2023-34090Highdecidim: Decidim vulnerable to sensitive data disclosure

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo