High DSA-4358-1 1 CVE

ruby-sanitize - security update

Published Dec 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	ruby-sanitize	2.1.0-2+deb9u1

Vulnerabilities 1

High 7.5

CVE-2018-3740

Sanitize vulnerable to Improper Input Validation and Cross-site Scripting

A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.

Ryan Grove sanitize (ruby gem) ruby-sanitize sanitize Debian Ubuntu RubyGems

Mar 30, 2018