https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:58:22 +0000 https://cve.radiocsirt.org/vuln/cve-2024-53988 <p><strong>Affected:</strong> rails-html-sanitizer</p> <p>rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails &gt;= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer may allow an attacker to inject content if HTML5 sanitization is enabled and the application developer has overridden the sanitizer&#39;s allowed tags where the &#34;math&#34;, &#34;mtext&#34;, &#34;table&#34;, and &#34;style&#34; elements are allowed and either either &#34;mglyph&#34; or &#34;malignmark&#34; are allowed. This vulnerability is fixed in 1.6.1.</p> <p><strong>Affected:</strong> rails-html-sanitizer</p> <p>rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails &gt;= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer may allow an attacker to inject content if HTML5 sanitization is enabled and the application developer has overridden the sanitizer&#39;s allowed tags where the &#34;math&#34;, &#34;mtext&#34;, &#34;table&#34;, and &#34;style&#34; elements are allowed and either either &#34;mglyph&#34; or &#34;malignmark&#34; are allowed. This vulnerability is fixed in 1.6.1.</p> https://cve.radiocsirt.org/vuln/cve-2024-53988