https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:21:10.642414+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-23435 CVE-2021-23435 — Open Redirect 2026-10-08T05:21:10.645743+00:00

Affected: clearance

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leading slashes (/////example.com) the user ends up being redirected to the external domain that comes after the slashes (http://example.com).

 https://cve.radiocsirt.org/vuln/ghsa-4hpq-rjcx-7vj9 GHSA-4hpq-rjcx-7vj9 — Clearance Gem Open Redirect Vulnerability 2026-10-08T05:21:10.645807+00:00

Affected: RubyGems: clearance

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of `session[:return_to]`. If the value used for return_to contains multiple leading slashes (`/////example.com`) the user ends up being redirected to the external domain that comes after the slashes (`http://example.com`).