Skip to content

Product

plataformatec Devise ruby gem vulnerabilities

1 published CVE affecting plataformatec Devise ruby gem, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest plataformatec Devise ruby gem CVEs

Newest publication first

  1. CVE-2019-5421 devise Time-of-check Time-of-use Race Condition vulnerability

    Published
    CriticalCVSS 9.8 EPSS 1.6%

    Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The Devise::Models::Lockable class, more specifically at the #increment_failed_attempts method. File location: lib/devise/models/lockable.rb that can result in Multiple c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.