Debian/ruby-rails-html-sanitizer: unknown
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVG_ALLOW_LOCAL_HREF o
Action: Upgrade ruby-rails-html-sanitizer to 1.7.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1-1 | - |
Fixed versions
| 1.7.1-1 |
Sources
- osv: DEBIAN-CVE-2026-73648#Debian:14/ruby-rails-html-sanitizer
- https://security-tracker.debian.org/tracker/CVE-2026-73648
published · modified · JSON