Decidim
1 CVEs
product
Monthly
Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. [CVSS 6.5 MEDIUM]
Information Disclosure
Decidim
NVD
GitHub
CVSS 3.1
6.5
EPSS
0.0%
CVE-2025-65017
Ruby
EPSS 0%
CVSS 6.5
MEDIUM
PATCH
This Month
Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. [CVSS 6.5 MEDIUM]
Information Disclosure
Decidim
NVD
GitHub