Skip to content
OpenAdvisories

Package · Debian

ruby-redcloth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-31606 Public exploit

    RedCloth Regular Expression Denial of Service issue

    A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

    ruby-redcloth RedCloth ruby-redcloth Debian Ubuntu RubyGems
  • Medium —
    CVE-2012-6684

    RedCloth Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

    RedCloth ruby-redcloth Debian RubyGems