Known vulnerabilities in trestle-auth
Vendor:
rubygems.org
Software:
trestle-auth
Software CPE:
cpe:2.3:a:rubygems.org:trestle-auth:*:*:*:*:*:*:*:*
Website:
https://rubygems.org
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU52469 - Cross-Site Request Forgery (CSRF) CVE-2021-29435 |
CWE-352 | Low | 0.4.2 | 21.04.2021 |
SB2021042152 |