Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | ruby-loofah | 2.2.3-1+deb10u1 |
| Debian · 9 | ruby-loofah | 2.0.3-2+deb9u3 |
Vulnerabilities 1
-
Medium 5.4
Loofah Allows Cross-site Scripting
In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.