RubyGems/smashing CVE-2021-35440: medium 6.1, EPSS 1.00%

Smashing Cross-site Scripting vulnerability

Action: Upgrade smashing to 1.3.5 or later.

bundle update smashing

Affected

Fixed versions

Sources

• osv: GHSA-254j-mmc5-qhpx
• https://nvd.nist.gov/vuln/detail/CVE-2021-35440
• https://github.com/Smashing/smashing/pull/186
• https://github.com/Smashing/smashing/pull/186/commits/f4648137ae77aa2a9ccd14b2e6eeaed2cfb32da3
• https://github.com/Smashing/smashing
• https://github.com/Smashing/smashing/blob/ad7325f159f89854ca4e7d94e7be9bee507b6d46/CHANGELOG.md
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/smashing/CVE-2021-35440.yml

CVE-2021-35440 · published 2022-05-24T19:06:56Z · modified 2024-02-16T08:19:53.512122Z · JSON