RubyGems/loofah CVE-2018-16468: medium 5.4, EPSS 0.92%

Loofah Cross-site Scripting vulnerability

Action: Upgrade loofah to 2.2.3 or later.

bundle update loofah

Affected

Fixed versions

Sources

• osv: GHSA-g4xq-jx4w-4cjv
• https://nvd.nist.gov/vuln/detail/CVE-2018-16468
• https://github.com/flavorjones/loofah/issues/154
• https://github.com/flavorjones/loofah
• https://www.debian.org/security/2019/dsa-4364

CVE-2018-16468 · published 2018-11-01T14:46:01Z · modified 2023-11-08T03:59:59.636888Z · JSON