RubyGems/loofah: low
Loofah has improper detection of disallowed URIs via `allowed_uri?`
Action: Upgrade loofah to 2.25.1 or later.
bundle update loofahAffected
| introduced | fixed | last affected |
|---|---|---|
| 2.25.0 | 2.25.1 | - |
Fixed versions
| 2.25.1 |
Sources
- osv: GHSA-2j22-pr5w-6gq8
- https://github.com/flavorjones/loofah/security/advisories/GHSA-46fp-8f5p-pf2m
- https://github.com/flavorjones/loofah/commit/f4ebc9c5193dde759a57541062e490e86fc7c068
- https://github.com/flavorjones/loofah
- https://github.com/flavorjones/loofah/releases/tag/v2.25.1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/loofah/GHSA-46fp-8f5p-pf2m.yml
published · modified · JSON