You can find the Solidus security policy at https://solidus.io/security.
Repository navigation
Security: solidusio/solidus_auth_devise
Security
SECURITY.md
-
Password reset endpoints allow for account enumerationGHSA-mc6q-7qq6-ghg8 published
Oct 7, 2026 by jarednormanModerate -
Authentication Bypass by CSRF WeaknessGHSA-xm34-v85h-9pg2 published
Nov 17, 2021 by waiting-for-devCritical
Learn more about advisories related to solidusio/solidus_auth_devise in the GitHub Advisory Database