Vulnerabilities

TI-2026-39344 CVE-2026-54498 · GHSA-97jw-64cj-jc58

view_component: around_render HTML-Safety Bypass

HIGH 73

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00453 Published 2026-07-17 Fixed in 4.12.0 CWE-79

TI-2026-39343 CVE-2026-54497 · GHSA-9h85-g7w3-rh49

HIGH 65

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.0033 Published 2026-07-17 Fixed in 4.12.0 CWE-362

TI-2026-32716 CVE-2026-44836 · GHSA-7f3r-gwc9-2995

MEDIUM 62

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00343 Published 2026-05-26 Fixed in 4.9.0 CWE-749

TI-2026-32717 CVE-2026-44837 · GHSA-hg3h-g7xc-f7vp

HIGH 66

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00412 Published 2026-05-26 Fixed in 4.9.0 CWE-187

TI-2024-14361 CVE-2024-21636 · GHSA-wf2x-8w6j-qw37

LOW 28

view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2024-01-04 Fixed in 3.9.0, 2.83.0 CWE-79