Medium DSA-4364-1 1 CVE

ruby-loofah - security update

Published Jan 8, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	ruby-loofah	2.0.3-2+deb9u2

Vulnerabilities 1

Medium 5.4

CVE-2018-16468

Loofah Cross-site Scripting vulnerability

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

loofah ruby-loofah ruby-loofah Debian Ubuntu RubyGems

Oct 30, 2018