https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T07:04:02.961559+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-186789 EUVD-2026-186789 2026-10-17T07:04:02.964982+00:00 EUVD-2026-186789 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36465 fkie_cve-2023-36465 2026-10-17T07:04:02.965011+00:00

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys. This issue has been patched in version 0.26.8 and 0.27.4.

 https://cve.radiocsirt.org/vuln/ghsa-639h-86hw-qcjq GHSA-639h-86hw-qcjq — Decidim has broken access control in templates 2026-10-17T07:04:02.965045+00:00

Affected: RubyGems: decidim, RubyGems: decidim-templates

### Impact

The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.

 https://cve.radiocsirt.org/vuln/gsd-2023-36465 gsd-2023-36465 2026-10-17T07:04:02.965073+00:00 gsd-2023-36465