Sploitus

29 exploited vulnerabilities in Decidim

Vulnerabilities with publicly known exploits

Vendors
Decidim, Git, Rubygems, Ransack, Unknown, Quilljs
With known exploits
29
Affected Decidim versions
< 0.30.5, 0.31.1, 0.26.8, 0.27.4, 0.30.4, 0.31.0, 0.26.7, 0.27.3, 0.28.3, 0.26.9, 0.27.5, 0.0.1, 0.27.7, 0.28.0, 0.28.1, 0.27.6

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2026-23891
CVSS 9.3 CRITICAL 2026-04-13FIX AVAILABLE
CVE-2023-36465
CVSS 9.1 CRITICAL 2023-10-05FIX AVAILABLE
CVE-2026-45414
CVSS 8.5 HIGH 2026-07-13FIX AVAILABLE
CVE-2025-65017
CVSS 8.2 HIGH 2026-02-03FIX AVAILABLE
CVE-2023-34089
CVSS 8.1 HIGH 2023-07-11FIX AVAILABLE
CVE-2023-32693
CVSS 8.1 HIGH 2023-07-11FIX AVAILABLE
CVE-2024-45594
CVSS 7.7 HIGH 2024-11-13FIX AVAILABLE
CVE-2026-45378
CVSS 7.5 HIGH 2026-07-13FIX AVAILABLE
CVE-2026-40870
CVSS 7.5 HIGH 2026-04-21FIX AVAILABLE
CVE-2026-40869
CVSS 7.5 HIGH 2026-04-14FIX AVAILABLE
CVE-2023-34090
CVSS 7.5 HIGH 2023-07-11FIX AVAILABLE
CVE-2023-48220
CVSS 7.4 HIGH 2024-02-20FIX AVAILABLE
CVE-2024-41673
CVSS 7.1 HIGH 2024-10-01FIX AVAILABLE
CVE-2024-32469
CVSS 7.1 HIGH 2024-07-10FIX AVAILABLE
CVE-2024-27090
CVSS 5.3 MEDIUM 2024-07-10FIX AVAILABLE
CVE-2026-45376
CVSS 5.5 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2024-32034
CVSS 6.8 MEDIUM 2024-09-16FIX AVAILABLE
CVE-2024-27095
CVSS 5.4 MEDIUM 2024-07-10FIX AVAILABLE
CVE-2026-45377
CVSS 6.5 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2026-45573
CVSS 6.4 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2023-51447
CVSS 6.3 MEDIUM 2024-02-20FIX AVAILABLE
CVE-2026-45415
CVSS 6.0 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2024-39910
CVSS 5.4 MEDIUM 2024-09-16FIX AVAILABLE
CVE-2023-47635
CVSS 5.7 MEDIUM 2024-02-20FIX AVAILABLE
CVE-2026-45086
CVSS 5.4 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2026-45330
CVSS 4.9 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2026-45572
CVSS 4.8 MEDIUM 2026-07-13FIX AVAILABLE
CVE-2023-47634
CVSS 3.1 LOW 2024-02-20FIX AVAILABLE