https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:28:05.433140+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241298 EUVD-2026-241298 2026-10-08T20:28:05.436049+00:00 EUVD-2026-241298 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8314 fkie_cve-2015-8314 2026-10-08T20:28:05.436087+00:00

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.

 https://cve.radiocsirt.org/vuln/ghsa-746g-3gfp-hfhw GHSA-746g-3gfp-hfhw — Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie 2026-10-08T20:28:05.436120+00:00

Affected: RubyGems: devise

Devise version before 3.5.4 uses cookies to implement a "Remember me" functionality. However, it generates the same cookie for all devices. If an attacker manages to steal a remember me cookie and the user does not change the password frequently, the cookie can be used to gain access to the application indefinitely.

 https://cve.radiocsirt.org/vuln/gsd-2015-8314 gsd-2015-8314 2026-10-08T20:28:05.436149+00:00 gsd-2015-8314