TI-2026-39344 CVE-2026-54498 · GHSA-97jw-64cj-jc58
view_component: around_render HTML-Safety Bypass
Priority HIGH 73
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.
ViewComponent
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
ViewComponent records in CISA KEVNo ViewComponent vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-32717 CVE-2026-44837 · GHSA-hg3h-g7xc-f7vp
view_component: System Test Entry Point Path Check Allows Sibling Directory Escape
Priority HIGH 66
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.
TI-2026-39343 CVE-2026-54497 · GHSA-9h85-g7w3-rh49
view_component: Reused Component Instances Retain Stale Render Context
Priority HIGH 65
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.
TI-2026-32716 CVE-2026-44836 · GHSA-7f3r-gwc9-2995
view_component: Preview Route Can Dispatch Inherited Helper Methods
Priority MEDIUM 62
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.
TI-2024-14361 CVE-2024-21636 · GHSA-wf2x-8w6j-qw37
view_component Cross-site Scripting vulnerability
Priority LOW 28
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.