{"action":"Upgrade rails-html-sanitizer to 1.7.1 or later.","affected":[{"fixed":"1.7.1","introduced":"1.0.3"}],"component":"rails-html-sanitizer","cve_ids":["CVE-2026-73648"],"ecosystem":"RubyGems","epss":0.00547,"exploited":false,"fixed_versions":["1.7.1"],"ghsa_id":"GHSA-cj75-f6xr-r4g7","id":"tcs_01M5KEJRYM3Z6NHDNFMDC5DDRG","modified_at":"2026-09-10T03:51:11.467365597Z","published_at":"2026-07-21T22:05:28Z","references":["https://osv.dev/vulnerability/GHSA-cj75-f6xr-r4g7","https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cj75-f6xr-r4g7","https://github.com/rails/rails-html-sanitizer/commit/74dcb8053e6da9921246ce71b06ad9fd65b19586","https://github.com/rails/rails-html-sanitizer","https://github.com/rails/rails-html-sanitizer/releases/tag/v1.7.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cj75-f6xr-r4g7","url":"https://osv.dev/vulnerability/GHSA-cj75-f6xr-r4g7"}],"summary":"Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations"}