RubyGems/rails-html-sanitizer CVE-2026-73648: medium, EPSS 0.55%
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
Action: Upgrade rails-html-sanitizer to 1.7.1 or later.
bundle update rails-html-sanitizerAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.3 | 1.7.1 | - |
Fixed versions
| 1.7.1 |
Sources
- osv: GHSA-cj75-f6xr-r4g7
- https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cj75-f6xr-r4g7
- https://github.com/rails/rails-html-sanitizer/commit/74dcb8053e6da9921246ce71b06ad9fd65b19586
- https://github.com/rails/rails-html-sanitizer
- https://github.com/rails/rails-html-sanitizer/releases/tag/v1.7.1
CVE-2026-73648 · published · modified · JSON