Skip to content
OpenAdvisories

Package · Debian

ruby-sanitize

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2023-23627

    Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element

    Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows `noscript` elements, attackers are able to include arbitra…

    rgrove sanitize ruby-sanitize sanitize Debian Ubuntu RubyGems