CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

devel/rubygem-devise-pwned_password 0.2.0

Devise extension that checks user passwords against the PwnedPasswords dataset

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports
Maintainer
sunpoet@FreeBSD.org
Packages
latest: 0.2.0
Upstream
up to date
Last update
to 0.2.0 · eff2c9d295
Quarterly
2026Q4: 0.2.0
WWW
https://github.com/michaelbanfield/devise-pwned_password
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.2.0.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (4)

Po-Chuan Hsieh (sunpoet) · 0.2.0
devel/rubygem-devise-pwned_password: Update to 0.2.0

Changes:	https://github.com/michaelbanfield/devise-pwned_password/releases
eff2c9d295
Po-Chuan Hsieh (sunpoet) · 0.1.12_2
devel/rubygem-devise-pwned_password: Fix version requirement of RUN_DEPENDS

- Fix gemspec for rubygem-devise-rails81 5.0.0+ update
- Bump PORTREVISION for package change
17e93d3481
Po-Chuan Hsieh (sunpoet) · 0.1.12_1
devel/rubygem-devise-pwned_password: Update RUN_DEPENDS: use Rails 8.1

- Bump PORTREVISION for dependency change
eb077daab3
Po-Chuan Hsieh (sunpoet) · 0.1.12
devel/rubygem-devise-pwned_password: Add rubygem-devise-pwned_password 0.1.12

Devise::PwnedPassword is a Devise extension that checks user passwords against
the PwnedPasswords dataset.

It checks for compromised ("pwned") passwords in 2 different places/ways:
- As a standard model validation using pwned. This:
  - prevents new users from being created (signing up) with a compromised
    password
  - prevents existing users from changing their password to a password that is
    known to be compromised
- (Optionally) Whenever a user signs in, checks if their current password is
  compromised and shows a warning if it is.
24bd1fcf60