CVE-2019-12732
1 advisory.
RubyGems/chartkick CVE-2019-12732: medium 4.7, EPSS 0.77%
Cross-site Scripting in Chartkick
Action: Upgrade chartkick to 3.2.0 or later.
bundle update chartkickAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-g45g-g52h-39rg
- https://nvd.nist.gov/vuln/detail/CVE-2019-12732
- https://github.com/ankane/chartkick/issues/488
- https://github.com/ankane/chartkick
- https://github.com/ankane/chartkick/blob/master/CHANGELOG.md
CVE-2019-12732 · published · modified · JSON