PkgSeer

Vulnerability GHSA-rq8q-p985-fjq7

Medium Risk
MEDIUM RISK
CVSS Score: 6.1
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
17 hours ago
November 12, 2026 at 11:39 PM UTC
Action View: Possible XSS vulnerability in strip_tags
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4

Summary

Action View: Possible XSS vulnerability in strip_tags

Details

Impact

strip_tags in Action View returns its sanitized output marked html_safe, but the underlying sanitizer encodes only &, < and >, leaving " and ' unencoded. Because ERB does not escape a string marked html_safe, untrusted input passed through strip_tags and rendered inside a quoted HTML attribute value could close the attribute and add new attributes, possibly leading to XSS. Applications that render strip_tags output from untrusted input inside an HTML attribute, for example in a title attribute or a <meta content> tag, are affected. Output rendered as element content is not affected.

Details

strip_tags now encodes " and ' in its output, as well as &, < and >, without double-encoding existing entities. Applications that use strip_tags output outside HTML, such as in a text template or JSON, now see &quot; and &#39; where they saw " and '; CGI.unescapeHTML decodes them. See the Action View CHANGELOG.

Workarounds

Pass strip_tags output to an attribute through a tag helper, which escapes attribute values, for example tag.a(title: strip_tags(user_input)).

Releases

The fixed releases are available at the normal locations.

Patches for those who cannot upgrade at once:

Credit

This issue was responsibly reported by HackerOne researcher lucasluitjes.

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Medium Risk
17 hours ago
Action View: Possible XSS vulnerability in highlight helper
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-v6rj-xm57-3p59
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-v6rj-xm57-3p59
Medium Risk
17 hours ago
Action View: Possible XSS vulnerability in text helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2p2f-4rq4-gjwc
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2p2f-4rq4-gjwc
Medium Risk
18 hours ago
Action View: Possible XSS vulnerability in tag helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-68p9-83h6-5wpj
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-68p9-83h6-5wpj
Low Risk
7 months ago
Rails has a possible XSS vulnerability in its Action View tag helpers
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-v55j-83pf-r9cq
4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-v55j-83pf-r9cq
Medium Risk
3 years ago
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 GHSA-xp5h-f8jf-rc8q
5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 GHSA-xp5h-f8jf-rc8q
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
17 hours ago
November 12, 2026 at 11:39 PM UTC
Fixed (8.1.4.1)
9 days ago
November 04, 2026 at 02:47 AM UTC
Last Modified
17 hours ago
November 12, 2026 at 11:45 PM UTC