Most recent entries from all

cnvd-2018-11020

2026-10-03T04:54:05.723853+00:00

cnvd-2018-11020

EUVD-2026-65406

2026-10-03T04:54:05.723901+00:00

EUVD-2026-65406

fkie_cve-2018-11627

2026-10-03T04:54:05.723923+00:00

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

GHSA-mq35-wqvf-r23c — Sinatra Cross-site Scripting vulnerability

2026-10-03T04:54:05.723961+00:00

Affected: RubyGems: sinatra

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

gsd-2018-11627

2026-10-03T04:54:05.723995+00:00

gsd-2018-11627

openSUSE-SU-2024:11353-1 — ruby2.7-rubygem-sinatra-2.1.0-1.6 on GA media

2026-10-03T04:54:05.724022+00:00

ruby2.7-rubygem-sinatra-2.1.0-1.6 on GA media

RHSA-2019:0212 — Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update

2026-10-03T04:54:05.724042+00:00

rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page

UBUNTU-CVE-2018-11627

2026-10-03T04:54:05.724063+00:00

Affected: Ubuntu:20.04:LTS: ruby-sinatra, Ubuntu:22.04:LTS: ruby-sinatra

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.