solidusio solidus vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20221

Newest CVEs

• CVE-2022-31000

  CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

  solidusio · solidus

  Low2.3
• CVE-2021-43846

  CSRF forgery protection bypass for Spree::OrdersController#populate

  solidusio · solidus

  Medium5.3
• CVE-2021-43805

  ReDos vulnerability on guest checkout email validation

  solidusio · solidus

  High7.5
• CVE-2020-15109

  Ability to change order address without triggering address validations in solidus

  solidusio · solidus

  Medium5.3