CVE-2024-53985
1 advisory.
RubyGems/rails-html-sanitizer CVE-2024-53985: medium 6.1, EPSS 0.60%
rails-html-sanitize has XSS vulnerability with certain configurations
Action: Upgrade rails-html-sanitizer to 1.6.1 or later.
bundle update rails-html-sanitizerAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.0 | 1.6.1 | - |
Fixed versions
| 1.6.1 |
Sources
- osv: GHSA-w8gc-x259-rc7x
- nvd: CVE-2024-53985
- https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-w8gc-x259-rc7x
- https://github.com/rails/rails-html-sanitizer/commit/b0220b8850d52199a15f83c472d175a4122dd7b1
- https://github.com/rails/rails-html-sanitizer/commit/cd18b0ef00aad1d4a9e1c5d860cd23f80f63c505
- https://github.com/rails/rails-html-sanitizer
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/CVE-2024-53985.yml
CVE-2024-53985 · published · modified · JSON