https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:06:38.232879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-177408 EUVD-2026-177408 2026-10-04T01:06:38.237484+00:00 EUVD-2026-177408 https://cve.radiocsirt.org/vuln/fkie_cve-2008-7311 fkie_cve-2008-7311 2026-10-04T01:06:38.237519+00:00

The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file.

 https://cve.radiocsirt.org/vuln/ghsa-g466-57gh-cqfw GHSA-g466-57gh-cqfw — Spree uses a hardcoded hash value 2026-10-04T01:06:38.237569+00:00

Affected: RubyGems: spree

The session cookie store implementation in Spree 0.2.0 uses a hardcoded `config.action_controller_session` hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the `config/environment.rb` file.

 https://cve.radiocsirt.org/vuln/gsd-2008-7311 gsd-2008-7311 2026-10-04T01:06:38.237596+00:00 gsd-2008-7311