Launchpad.net

CVE 2020-16253

The PgHero gem through 2.6.0 for Ruby allows CSRF.

See the CVE page on Mitre.org for more details.