https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:56:38 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0463 certfr-2024-avi-0463 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0463 https://cve.radiocsirt.org/vuln/euvd-2026-5150 EUVD-2026-5150 https://cve.radiocsirt.org/vuln/euvd-2026-5150 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32464 <p>Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.</p> <p>Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-32464 https://cve.radiocsirt.org/vuln/ghsa-prjp-h48f-jgf6 <p><strong>Affected:</strong> RubyGems: actiontext</p> <p>Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML.</p> <p>This has been assigned the CVE identifier CVE-2024-32464.</p> <p>Versions Affected: &gt;= 7.1.0 Not affected: &lt; 7.1.0 Fixed Versions: 7.1.3.4</p> <p>Impact ------ This could lead to a potential cross site scripting issue within the Trix editor.</p> <p>Releases -------- The fixed releases are available at the normal locations.</p> <p>Workarounds ----------- N/A</p> <p>Patches ------- To aid users who aren&#39;t able to upgrade immediately we have provided patches for the supported release series in accordance with our [maintenance policy](https://guides.rubyonrails.org/maintenance_policy.html#security-issues) regarding security issues. They are in git-am format and consist of a single changeset.</p> <p>* action_text_content_attachment_xss_7_1_stable.patch - Patch for 7.1 series</p> <p>Credits -------</p> <p>Thank you [ooooooo_q](https://hackerone.com/ooooooo_q) for reporting this!</p> <p><strong>Affected:</strong> RubyGems: actiontext</p> <p>Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML.</p> <p>This has been assigned the CVE identifier CVE-2024-32464.</p> <p>Versions Affected: &gt;= 7.1.0 Not affected: &lt; 7.1.0 Fixed Versions: 7.1.3.4</p> <p>Impact ------ This could lead to a potential cross site scripting issue within the Trix editor.</p> <p>Releases -------- The fixed releases are available at the normal locations.</p> <p>Workarounds ----------- N/A</p> <p>Patches ------- To aid users who aren&#39;t able to upgrade immediately we have provided patches for the supported release series in accordance with our [maintenance policy](https://guides.rubyonrails.org/maintenance_policy.html#security-issues) regarding security issues. They are in git-am format and consist of a single changeset.</p> <p>* action_text_content_attachment_xss_7_1_stable.patch - Patch for 7.1 series</p> <p>Credits -------</p> <p>Thank you [ooooooo_q](https://hackerone.com/ooooooo_q) for reporting this!</p> https://cve.radiocsirt.org/vuln/ghsa-prjp-h48f-jgf6 https://cve.radiocsirt.org/vuln/gsd-2024-32464 gsd-2024-32464 https://cve.radiocsirt.org/vuln/gsd-2024-32464 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-32464 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails</p> <p>Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails</p> <p>Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-32464 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1292 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1292