Product by Rubyonrails
Rails Html Sanitizers
10 known vulnerabilities in Rails Html Sanitizers (Rubyonrails), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2022-32209 | Https://github.com/rails/rails-html-sanitizer: Cross-site Scripting | 6.1 | |
| High | CVE-2022-23517 | Inefficient Regular Expression Complexity in rails-html-sanitizer | 7.5 | |
| High | CVE-2022-23519 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 7.2 | |
| Medium | CVE-2022-23520 | rails-html-sanitizer contains an incomplete fix for an XSS vulnerability | 6.1 | |
| Medium | CVE-2022-23518 | Improper neutralization of data URIs allows XSS in rails-html-sanitizer | 6.1 | |
| Medium | CVE-2024-53985 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53989 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53986 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53988 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 | |
| Medium | CVE-2024-53987 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 | 6.1 |