CVE-2020-16254

RubyGems/chartkick CVE-2020-16254: medium 6.1

CSS Injection in Chartkick gem

Action: Upgrade chartkick to 3.4.0 or later.

bundle update chartkick

Affected

Fixed versions

Sources

• osv: GHSA-3j95-fjv2-3m4p
• https://nvd.nist.gov/vuln/detail/CVE-2020-16254
• https://github.com/ankane/chartkick/issues/546
• https://github.com/ankane/chartkick/commit/ba67ab5e603de4d94676790fdac425f8199f1c4f
• https://github.com/ankane/chartkick
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/chartkick/CVE-2020-16254.yml

CVE-2020-16254 · published 2020-08-12T14:29:15Z · modified 2023-11-08T04:02:39.437608Z · JSON