PkgSeer

Vulnerability GHSA-2p2f-4rq4-gjwc

Medium Risk
MEDIUM RISK
CVSS Score: 6.1
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
16 hours ago
November 12, 2026 at 11:38 PM UTC
Action View: Possible XSS vulnerability in text helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4

Summary

Action View: Possible XSS vulnerability in text helpers

Details

Impact

With the HTML5 sanitizer (Rails::HTML5::Sanitizer, the default vendor on CRuby for applications using load_defaults 7.1 or later), Nokogiri before 1.19.5 serializes < and > unescaped inside attribute values. The Action View text helpers highlight and simple_format sanitize their input and then process the resulting HTML as a string: highlight splits it on tag boundaries to insert matches, and simple_format splits it into paragraphs on blank lines. An unescaped > or a blank line inside an attribute value could cause markup in that value, which the sanitizer left inert, to be emitted as live elements in the helper's html_safe output, possibly leading to XSS. Applications that use the HTML5 sanitizer and pass untrusted text to highlight, or to simple_format with html_options, are affected.

Details

The fixed releases require rails-html-sanitizer 1.7.2 or later, which requires Loofah 2.25.3 and Nokogiri 1.19.5. With these versions, the HTML5 sanitizer escapes < and > in attribute values as &lt; and &gt;, as the HTML4 sanitizer already does. The parsed DOM is unchanged, but code or tests that compare sanitized HTML as a string may see the new serialization.

Workarounds

Upgrade Nokogiri to 1.19.5 or later; the escaping is in its HTML5 serializer, so no Rails upgrade is needed. Alternatively, use the HTML4 sanitizer by setting config.action_view.sanitizer_vendor = Rails::HTML4::Sanitizer.

Releases

The fixed releases are available at the normal locations.

Patches for those who cannot upgrade at once:

Credit

This issue was responsibly reported by HackerOne researcher azaran. This issue was also found by the Anthropic OSS Scanner (ANT-2026-RTK47OH0).

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Medium Risk
16 hours ago
Action View: Possible XSS vulnerability in highlight helper
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-v6rj-xm57-3p59
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-v6rj-xm57-3p59
Medium Risk
16 hours ago
Action View: Possible XSS vulnerability in strip_tags
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-rq8q-p985-fjq7
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-rq8q-p985-fjq7
Medium Risk
18 hours ago
Action View: Possible XSS vulnerability in tag helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-68p9-83h6-5wpj
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-68p9-83h6-5wpj
Low Risk
7 months ago
Rails has a possible XSS vulnerability in its Action View tag helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-v55j-83pf-r9cq
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-v55j-83pf-r9cq
Medium Risk
3 years ago
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 GHSA-xp5h-f8jf-rc8q
5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 GHSA-xp5h-f8jf-rc8q
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
16 hours ago
November 12, 2026 at 11:38 PM UTC
Fixed (8.1.4.1)
9 days ago
November 04, 2026 at 02:47 AM UTC
Last Modified
16 hours ago
November 12, 2026 at 11:45 PM UTC