RubyGems/rails-html-sanitizer CVE-2018-3741: medium 6.1, EPSS 1.25%

rails-html-sanitizer Cross-site Scripting vulnerability

Action: Upgrade rails-html-sanitizer to 1.0.4 or later.

bundle update rails-html-sanitizer

Affected

Fixed versions

Sources

• osv: GHSA-px3r-jm9g-c8w8
• https://nvd.nist.gov/vuln/detail/CVE-2018-3741
• https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae
• https://github.com/rails/rails-html-sanitizer

CVE-2018-3741 · published 2018-04-26T15:41:10Z · modified 2023-11-08T04:00:18.344915Z · JSON