Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

Solidus

Become the brand everyone talks about.
Collective - Host: opensource - https://opencollective.com/solidus - Website: https://solidus.io/ - Code: https://github.com/solidusio/solidus

Low

solidus: GSA_kwCzR0hTQS04NjM5LXF4NTYtcjQyOM4AArTb

CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend
Ecosystems: rubygems
Packages: solidus_backend
Source: github
Published: over 2 years ago

Moderate

solidus: GSA_kwCzR0hTQS1oM2ZnLWg1djMtdmY4bc0gsw

CSRF forgery protection bypass in solidus_frontend
Ecosystems: rubygems
Packages: solidus_frontend
Source: github
Published: almost 3 years ago

High

solidus: GSA_kwCzR0hTQS1xeG1yLXF4aDYtMmNjOc0ZdQ

ReDos vulnerability on guest checkout email validation
Ecosystems: rubygems
Packages: solidus_core
Source: github
Published: about 3 years ago

Critical

solidus: GSA_kwCzR0hTQS01NjI5LTg4NTUtZ2Y0Z80XUQ

Authentication Bypass by CSRF Weakness
Ecosystems: rubygems
Packages: solidus_core
Source: github
Published: about 3 years ago

Moderate

solidus: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTNtdmctcnJydy1tN3Bo

Ability to change order address without triggering address validations in solidus
Ecosystems: rubygems
Packages: solidus_api, solidus_frontend
Source: github
Published: over 4 years ago