Skip to content
OpenAdvisories
High DSA-4730-1 1 CVE

ruby-sanitize - security update

Published Jul 19, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 ruby-sanitize 4.6.6-2.1~deb10u1

Vulnerabilities 1

  • High 7.3
    CVE-2020-4054

    Cross-site Scripting in Sanitize

    In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using Sanitize's "relaxed" config, or a custom config that allows certain elements, some content in a math…

    rgrove sanitize ruby-sanitize sanitize Debian Ubuntu RubyGems