Read the docs

flavorjones

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

flavorjones records in CISA KEV

No flavorjones vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Loofah 7 records HIGH

Records

10 records

TI-2022-07573 CVE-2022-23514 · GHSA-486f-hjj9-9vhh

Inefficient Regular Expression Complexity in Loofah

Priority HIGH 72

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01829 Published 2022-12-14 Partial fix · 2.19.1 CWE-1333
TI-2022-07575 CVE-2022-23516 · GHSA-3x8r-x6xp-q4vm

Uncontrolled Recursion in Loofah

Priority MEDIUM 41

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01167 Published 2022-12-14 Partial fix · 2.19.1 CWE-674
TI-2022-07574 CVE-2022-23515 · GHSA-228g-948r-83gx

Improper neutralization of data URIs may allow XSS in Loofah

Priority LOW 29

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00859 Published 2022-12-14 Partial fix · 2.19.1 CWE-79
TI-2019-11687 CVE-2019-15587 · GHSA-c3gv-9cxf-6f57

Cross-site scripting in Loofah

Priority LOW 28

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01561 Published 2019-10-22 Partial fix · 2.3.1 CWE-79
TI-2018-11810 CVE-2018-16468 · GHSA-g4xq-jx4w-4cjv

Cross-site scripting in Loofah

Priority LOW 26

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00916 Published 2018-10-30 Partial fix · 2.2.3 CWE-79
Open these records in search →