spree vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-XF4V-W5X5-PV79Mediumspree: Spree: CSV Formula Injection in Customer Export CVE-2011-10026Criticalspree: Spree Commerce is vulnerable to RCE through Search API CVE-2011-10019Criticalspree: Spree has Remote Command Execution vulnerability in search functionality CVE-2008-7310Mediumspree: Spree does not properly restrict the use of a hash to provide values for a model's attributes CVE-2008-7311Mediumspree: Spree uses a hardcoded hash value CVE-2010-3978Mediumspree: Spree allows remote attackers to obtain sensitive information CVE-2020-15269Highspree: Ensure that doorkeeper_token is valid when authenticating requests in API v2 calls CVE-2013-1656Mediumspree: Spree Improper Input Validation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo