Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. This issue has been patched in versions 0.30.4 and 0.31.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-03 | 2 | Disclosure2 |
| 2026-02-08 | 1 | Disclosure1 |
RubySec ➜ CVE-2025-65017 (decidim): Decidim's private data exports can lead to data leaks https://rubysec.com/advisories/CVE-2025-65017/
Post summary
RubySec announces CVE-2025-65017 affecting Decidim, noting that the private data export feature can lead to data leaks.
CVE-2025-65017: The GDPR Paradox: How Decidim's Privacy Export Leaked Everyone's Data A critical type confusion vulnerability in Decidim's 'Download Your Data' feature turned a privacy compliance tool into a data leak hose. Due to a mismatch between R... https://cvereports.com/reports/CVE-2025-65017
Post summary
A type‑confusion vulnerability in Decidim’s privacy export feature could leak user data; no proof of exploitation, PoC, patch, or active attacks are mentioned.
CVE-2025-65017 Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to da… https://www.cve.org/CVERecord?id=CVE-2025-65017
Post summary
The CVE-2025-65017 vulnerability in Decidim involves data exposure through private data exports in specific version ranges, with no PoC, exploit code, or patch mentioned.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | decidim | decidim | - | ruby | - |
| App | decidim | decidim | 0.31.0 | ruby | - |
| App | decidim | decidim | 0.31.0 | ruby | - |