https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:51:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-61322 EUVD-2026-61322 https://cve.radiocsirt.org/vuln/euvd-2026-61322 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3741 <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-3741 https://cve.radiocsirt.org/vuln/ghsa-px3r-jm9g-c8w8 <p><strong>Affected:</strong> RubyGems: rails-html-sanitizer</p> <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> <p><strong>Affected:</strong> RubyGems: rails-html-sanitizer</p> <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> https://cve.radiocsirt.org/vuln/ghsa-px3r-jm9g-c8w8 https://cve.radiocsirt.org/vuln/gsd-2018-3741 gsd-2018-3741 https://cve.radiocsirt.org/vuln/gsd-2018-3741 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11349-1 <p>ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 on GA media</p> <p>ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11349-1 https://cve.radiocsirt.org/vuln/rhsa-2019:0212 <p>rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page</p> <p>rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0212 https://cve.radiocsirt.org/vuln/suse-su-2019:2182-1 <p>Security update for rubygem-rails-html-sanitizer</p> <p>Security update for rubygem-rails-html-sanitizer</p> https://cve.radiocsirt.org/vuln/suse-su-2019:2182-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3741 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rails-html-sanitizer</p> <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rails-html-sanitizer</p> <p>There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-3741