Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:18:35 +0000 EUVD-2026-106202 https://cve.radiocsirt.org/vuln/euvd-2026-106202 EUVD-2026-106202 https://cve.radiocsirt.org/vuln/euvd-2026-106202 fkie_cve-2013-2506 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2506 <p>app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.</p> <p>app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2506 GHSA-jp57-9j37-5476 — spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles https://cve.radiocsirt.org/vuln/ghsa-jp57-9j37-5476 <p><strong>Affected:</strong> RubyGems: spree_auth_devise</p> <p>`app/models/spree/user.rb` in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.</p> <p><strong>Affected:</strong> RubyGems: spree_auth_devise</p> <p>`app/models/spree/user.rb` in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.</p> https://cve.radiocsirt.org/vuln/ghsa-jp57-9j37-5476 gsd-2013-2506 https://cve.radiocsirt.org/vuln/gsd-2013-2506 gsd-2013-2506 https://cve.radiocsirt.org/vuln/gsd-2013-2506