| Package | Affected versions | Patched versions |
|---|---|---|
| decidim | < 0.27.8 | 0.27.8 |
The version control feature used in resources is subject to potential cross-site scripting (XSS) attack through a malformed URL.
Not available
OWASP ASVS v4.0.3-5.1.3
This issue was discovered in a security audit organized by Open Source Politics against Decidim done during July 2025.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free