https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:33:50.927754+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06513 bdu:2024-06513 2026-10-03T10:33:51.517640+00:00 bdu:2024-06513 https://cve.radiocsirt.org/vuln/euvd-2026-258334 EUVD-2026-258334 2026-10-03T10:33:51.517680+00:00 EUVD-2026-258334 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23518 fkie_cve-2022-23518 2026-10-03T10:33:51.517695+00:00

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are vulnerable to cross-site scripting via data URIs when used in combination with Loofah >= 2.1.0. This issue is patched in version 1.4.4.

 https://cve.radiocsirt.org/vuln/ghsa-mcvf-2q2m-x72m GHSA-mcvf-2q2m-x72m — Improper neutralization of data URIs may allow XSS in rails-html-sanitizer 2026-10-03T10:33:51.517728+00:00

Affected: RubyGems: rails-html-sanitizer

## Summary

rails-html-sanitizer `>= 1.0.3, < 1.4.4` is vulnerable to cross-site scripting via data URIs when used in combination with Loofah `>= 2.1.0`.

## Mitigation

Upgrade to rails-html-sanitizer `>= 1.4.4`.

## Severity

The maintainers have evaluated this as [Medium Severity 6.1](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

## References

- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html) - [SVG MIME Type (image/svg+xml) is misleading to developers · Issue #266 · w3c/svgwg](https://github.com/w3c/svgwg/issues/266) - https://github.com/rails/rails-html-sanitizer/issues/135 - https://hackerone.com/reports/1694173

## Credit

This vulnerability was independently reported by Maciej Piechota (@haqpl) and Mrinmoy Das (@goromlagche).

 https://cve.radiocsirt.org/vuln/gsd-2022-23518 gsd-2022-23518 2026-10-03T10:33:51.517767+00:00 gsd-2022-23518 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12769-1 openSUSE-SU-2024:12769-1 — ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media 2026-10-03T10:33:51.517780+00:00

ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:2097 RHSA-2023:2097 — Red Hat Security Advisory: Satellite 6.13 Release 2026-10-03T10:33:51.517810+00:00

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode SnakeYaml: Constructor Deserialization Remote Code Execution rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack rubygem-loofah: inefficient regular expression leading to denial of service rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting rubygem-loofah: Uncontrolled Recursion leading to denial of service rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations snakeyaml: Denial of Service due to missing nested depth limitation for collections tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers rubygem-tzinfo: arbitrary code execution activerecord: Possible RCE escalation bug with Serialized Columns in Active Record apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaug…

 https://cve.radiocsirt.org/vuln/suse-su-2023:3534-1 SUSE-SU-2023:3534-1 — Security update for rubygem-rails-html-sanitizer 2026-10-03T10:33:51.517879+00:00

Security update for rubygem-rails-html-sanitizer

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23518 UBUNTU-CVE-2022-23518 2026-10-03T10:33:51.517898+00:00

Affected: Ubuntu:16.04:LTS: ruby-rails-html-sanitizer, Ubuntu:18.04:LTS: ruby-rails-html-sanitizer, Ubuntu:20.04:LTS: ruby-rails-html-sanitizer, Ubuntu:22.04:LTS: ruby-rails-html-sanitizer, Ubuntu:24.04:LTS: ruby-rails-html-sanitizer, Ubuntu:25.10: ruby-rails-html-sanitizer, Ubuntu:26.04:LTS: ruby-rails-html-sanitizer

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, < 1.4.4 are vulnerable to cross-site scripting via data URIs when used in combination with Loofah >= 2.1.0. This issue is patched in version 1.4.4.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0266 WID-SEC-W-2023-0266 — genua genucenter: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-03T10:33:51.517932+00:00

Ein Angreifer kann mehrere Schwachstellen in genua genucenter ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.