decidim — Vulnerabilities & Security Advisories 19

Decidim is an open-source digital platform for participatory democracy and citizen engagement, enabling governments and organizations to facilitate public consultations and collaborative decision-making. Historically, the platform has been susceptible to various vulnerability classes, including remote code execution, cross-site scripting, and privilege escalation vulnerabilities, as evidenced by its 19 recorded CVEs. While no major public security incidents have been widely documented, the consistent discovery of vulnerabilities highlights the importance of regular security assessments and timely patching for organizations implementing this platform to maintain secure public engagement environments.