CVE-2021-35440
1 advisory.
RubyGems/smashing CVE-2021-35440: medium 6.1
Smashing Cross-site Scripting vulnerability
Action: Upgrade smashing to 1.3.5 or later.
bundle update smashingAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.5 | - |
Fixed versions
| 1.3.5 |
Sources
- osv: GHSA-254j-mmc5-qhpx
- https://nvd.nist.gov/vuln/detail/CVE-2021-35440
- https://github.com/Smashing/smashing/pull/186
- https://github.com/Smashing/smashing/pull/186/commits/f4648137ae77aa2a9ccd14b2e6eeaed2cfb32da3
- https://github.com/Smashing/smashing
- https://github.com/Smashing/smashing/blob/ad7325f159f89854ca4e7d94e7be9bee507b6d46/CHANGELOG.md
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/smashing/CVE-2021-35440.yml
CVE-2021-35440 · published · modified · JSON