Product by Rails
Rails-html-sanitizer
11 known vulnerabilities in Rails-html-sanitizer (Rails), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-23517 | Inefficient Regular Expression Complexity in rails-html-sanitizer | 7.5 | |
| High | CVE-2022-23519 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 7.2 | |
| Medium | CVE-2022-23520 | rails-html-sanitizer contains an incomplete fix for an XSS vulnerability | 6.1 | |
| Medium | CVE-2018-3741 | Rails-html-sanitizer: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-73648 | rails-html-sanitizer: Possible XSS vulnerability with certain configurations | — | |
| Medium | CVE-2022-23518 | Improper neutralization of data URIs allows XSS in rails-html-sanitizer | 6.1 | |
| Medium | CVE-2024-53985 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53989 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53986 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53988 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53987 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 |