{"action":"Upgrade sanitize to 4.6.3 or later.","affected":[{"fixed":"4.6.3","introduced":"3.0.0"}],"component":"sanitize","cve_ids":["CVE-2018-3740"],"ecosystem":"RubyGems","epss":0.01468,"exploited":false,"fixed_versions":["4.6.3"],"ghsa_id":"GHSA-7f42-p84j-f58p","id":"tcs_01M5KEHPH93KKNQR18KJ0CGTW1","modified_at":"2024-02-16T08:20:34.576085Z","published_at":"2018-03-21T11:56:32Z","references":["https://osv.dev/vulnerability/GHSA-7f42-p84j-f58p","https://nvd.nist.gov/vuln/detail/CVE-2018-3740","https://github.com/rgrove/sanitize/issues/176","https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e","https://github.com/rgrove/sanitize/commit/93feeb38e21864146bb29191792b971dbe1ec62e","https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released","https://github.com/rgrove/sanitize","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sanitize/CVE-2018-3740.yml","https://www.debian.org/security/2018/dsa-4358"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7f42-p84j-f58p","url":"https://osv.dev/vulnerability/GHSA-7f42-p84j-f58p"}],"summary":"Sanitize vulnerable to Improper Input Validation and Cross-site Scripting"}