GHSA-cc4g-m3g7-xmw8
GitHub Security Advisory
Decidim has a cross-site scripting vulnerability in the version control page
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
### Impact
The version control feature used in resources is subject to potential cross-site scripting (XSS) attack through a malformed URL.
### Workarounds
Not available
### References
OWASP ASVS v4.0.3-5.1.3
### Credits
This issue was discovered in a security audit organized by [Open Source Politics](https://opensourcepolitics.eu/) against Decidim done during July 2025.
Affected Packages
RubyGems
decidim
Affected versions:
0
(fixed in 0.27.8)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 12, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.