Debian/ruby-rails-html-sanitizer: medium 6.1
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of Rails::Html::Sanit
Action: Upgrade ruby-rails-html-sanitizer to 1.4.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.4-1 | - |
Fixed versions
| 1.4.4-1 |
Sources
- osv: DEBIAN-CVE-2022-23520#Debian:14/ruby-rails-html-sanitizer
- https://security-tracker.debian.org/tracker/CVE-2022-23520
published · modified · JSON