TI-2022-07577 CVE-2022-23518 · GHSA-mcvf-2q2m-x72m
Improper neutralization of data URIs allows XSS in rails-html-sanitizer
Priority LOW 29
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.
Vulnerabilities
7 records
TI-2022-07575 CVE-2022-23516 · GHSA-3x8r-x6xp-q4vm
Uncontrolled Recursion in Loofah
Priority MEDIUM 41
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
TI-2022-07574 CVE-2022-23515 · GHSA-228g-948r-83gx
Improper neutralization of data URIs may allow XSS in Loofah
Priority LOW 29
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
TI-2022-07573 CVE-2022-23514 · GHSA-486f-hjj9-9vhh
Inefficient Regular Expression Complexity in Loofah
Priority HIGH 72
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
TI-2019-11687 CVE-2019-15587 · GHSA-c3gv-9cxf-6f57
Cross-site scripting in Loofah
Priority LOW 28
In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
TI-2018-11810 CVE-2018-16468 · GHSA-g4xq-jx4w-4cjv
Cross-site scripting in Loofah
Priority LOW 26
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
TI-2018-05825 CVE-2018-8048 · GHSA-x7rv-cr6v-4vm4
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in…
Priority LOW 31
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.