https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:12:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-31614 EUVD-2026-31614 https://cve.radiocsirt.org/vuln/euvd-2026-31614 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41263 <p>rails_multisite provides multi-db support for Rails applications. In affected versions this vulnerability impacts any Rails applications using `rails_multisite` alongside Rails&#39; signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different &#39;sites&#39; within a multi-site Rails application. The issue has been patched in v4 of the `rails_multisite` gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.</p> <p>rails_multisite provides multi-db support for Rails applications. In affected versions this vulnerability impacts any Rails applications using `rails_multisite` alongside Rails&#39; signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different &#39;sites&#39; within a multi-site Rails application. The issue has been patched in v4 of the `rails_multisite` gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41263 https://cve.radiocsirt.org/vuln/ghsa-844m-cpr9-jcmh <p><strong>Affected:</strong> RubyGems: rails_multisite</p> <p>### Impact This vulnerability impacts any Rails applications using `rails_multisite` alongside Rails&#39; signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different &#39;sites&#39; within a multi-site Rails application.</p> <p>### Patches The issue has been patched in v4 of the `rails_multisite` gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.</p> <p><strong>Affected:</strong> RubyGems: rails_multisite</p> <p>### Impact This vulnerability impacts any Rails applications using `rails_multisite` alongside Rails&#39; signed/encrypted cookies. Depending on how the application makes use of these cookies, it may be possible for an attacker to re-use cookies on different &#39;sites&#39; within a multi-site Rails application.</p> <p>### Patches The issue has been patched in v4 of the `rails_multisite` gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.</p> https://cve.radiocsirt.org/vuln/ghsa-844m-cpr9-jcmh https://cve.radiocsirt.org/vuln/gsd-2021-41263 gsd-2021-41263 https://cve.radiocsirt.org/vuln/gsd-2021-41263