https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:31:06.192930+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-61322 EUVD-2026-61322 2026-10-03T01:31:06.203876+00:00 EUVD-2026-61322 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3741 fkie_cve-2018-3741 2026-10-03T01:31:06.203910+00:00

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

 https://cve.radiocsirt.org/vuln/ghsa-px3r-jm9g-c8w8 GHSA-px3r-jm9g-c8w8 — rails-html-sanitizer Cross-site Scripting vulnerability 2026-10-03T01:31:06.203942+00:00

Affected: RubyGems: rails-html-sanitizer

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

 https://cve.radiocsirt.org/vuln/gsd-2018-3741 gsd-2018-3741 2026-10-03T01:31:06.203967+00:00 gsd-2018-3741 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11349-1 openSUSE-SU-2024:11349-1 — ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 on GA media 2026-10-03T01:31:06.203979+00:00

ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2019:0212 RHSA-2019:0212 — Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update 2026-10-03T01:31:06.203996+00:00

rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page

 https://cve.radiocsirt.org/vuln/suse-su-2019:2182-1 SUSE-SU-2019:2182-1 — Security update for rubygem-rails-html-sanitizer 2026-10-03T01:31:06.204015+00:00

Security update for rubygem-rails-html-sanitizer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3741 UBUNTU-CVE-2018-3741 2026-10-03T01:31:06.204029+00:00

Affected: Ubuntu:16.04:LTS: ruby-rails-html-sanitizer

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.