tocsin

Debian/rails: unknown

The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.

Action: Upgrade rails to 2.3.14.1 or later.

Affected

introducedfixedlast affected
02.3.14.1-

Fixed versions

2.3.14.1

Sources

published · modified · JSON