{"action":"Upgrade loofah to 2.25.1 or later.","affected":[{"fixed":"2.25.1","introduced":"2.25.0"}],"component":"loofah","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.25.1"],"ghsa_id":"GHSA-46fp-8f5p-pf2m","id":"tcs_01M5KEGGEAPMBWAGHH1AWC31YK","modified_at":"2026-09-10T03:50:36.988646266Z","published_at":"2026-03-18T17:26:48Z","references":["https://osv.dev/vulnerability/GHSA-46fp-8f5p-pf2m","https://github.com/flavorjones/loofah/security/advisories/GHSA-46fp-8f5p-pf2m","https://github.com/flavorjones/loofah"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-46fp-8f5p-pf2m","url":"https://osv.dev/vulnerability/GHSA-46fp-8f5p-pf2m"}],"summary":"Improper detection of disallowed URIs by Loofah `allowed_uri?`"}