Skip to content
OpenAdvisories
Unscored DSA-3168-1 1 CVE

ruby-redcloth - security update

Published Feb 22, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ruby-redcloth 4.2.9-2+deb7u2

Vulnerabilities 1

  • Medium —
    CVE-2012-6684

    RedCloth Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

    RedCloth ruby-redcloth Debian RubyGems