https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:20:17.861241+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2015-8314 CVE-2015-8314 2026-10-08T22:20:17.862856+00:00

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.

 https://cve.radiocsirt.org/vuln/ghsa-746g-3gfp-hfhw GHSA-746g-3gfp-hfhw — Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie 2026-10-08T22:20:17.862902+00:00

Affected: RubyGems: devise

Devise version before 3.5.4 uses cookies to implement a "Remember me" functionality. However, it generates the same cookie for all devices. If an attacker manages to steal a remember me cookie and the user does not change the password frequently, the cookie can be used to gain access to the application indefinitely.