heartcombo devise vulnerabilities
2 published CVEs name heartcombo devise among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40295
Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler
heartcombo · devise
Medium6.1 - CVE-2026-32700
Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to
heartcombo · devise
Medium6.0