RubyGems/loofah: low
Improper detection of disallowed URIs by Loofah `allowed_uri?`
Action: Upgrade loofah to 2.25.1 or later.
bundle update loofahAffected
| introduced | fixed | last affected |
|---|---|---|
| 2.25.0 | 2.25.1 | - |
Fixed versions
| 2.25.1 |
Sources
- osv: GHSA-46fp-8f5p-pf2m
- https://github.com/flavorjones/loofah/security/advisories/GHSA-46fp-8f5p-pf2m
- https://github.com/flavorjones/loofah
published · modified · JSON