Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | ruby-loofah | 2.0.3-2+deb9u1 |
Vulnerabilities 1
-
Medium 6.1
Cross-site Scripting in loofah
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.