7026 today
    CVE-2026-45376 (decidim-admin): Decidim - Admin user search allows SQL injection through similarity-based sorting

    CVE-2026-45376 (decidim-admin): Decidim - Admin user search allows SQL injection through similarity-based sorting

    21-Jul-2026 1
    Originally appeared on RubySec.## Description The admin organization user search uses the untrusted term value inside raw SQL ORDER BY expressions. Because the value is interpolated before Rails sanitization is applied, a crafted search string is executed by PostgreSQL as part...
    Read more /
    Use coupon code:

    RUBYONRAILS

    to get 30% discount on our bundle!
    Prepare for your next tech interview with our comprehensive collection of programming interview guides. Covering JavaScript, Ruby on Rails, React, and Python, these highly-rated books offer thousands of essential questions and answers to boost your interview success. Buy our 'Ultimate Job Interview Preparation eBook Bundle' featuring 2200+ questions across multiple languages. Ultimate Job Interview Preparation eBook Bundle

    Bestseller

    Ruby Interview Questions

    Tags

    #ruby #rubyonrails #programming #webdev #cve-2026-45376 #(decidim-admin): #search #sql

    Related Links

    Rendering Markdowns in Rails
    strftimer | A Ruby strftime generator
    Luitjes IT | erb2builder
    Support Us
    From AI Opportunity to AI Feature in Rails

    Useful Links

    Quick Links

    Get in Touch

    Ruby On Rails Bosnia

    [email protected]

    [266, 8547, 15469, 16367, 16446, 20842, 20230]

    Ruby On Rails Bosnia © 2016

    Template By HTML Codex