Skip to content
OpenAdvisories

Package · RubyGems

actiontext

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.6
    CVE-2024-47888

    Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

    Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the `plain_text_for_blockquote_node helper` in Action Text. Carefully…

    rails rails rails rails Debian Ubuntu RubyGems
  • Medium 6.1
    CVE-2024-32464

    ActionText ContentAttachment can Contain Unsanitized HTML

    Action Text brings rich text content and editing to Rails. Instances of ActionText::Attachable::ContentAttachment included within a rich_text_area tag could potentially contain unsanitized HTML. This vulnerability is fixed in 7.1.3.4 and 7.2.0.beta2.

    rails rails rails actiontext Ubuntu RubyGems
  • Medium 5.4
    CVE-2024-34341

    The Trix Editor Contains an Arbitrary Code Execution Vulnerability

    Trix is a rich text editor. The Trix editor, versions prior to 2.1.1, is vulnerable to arbitrary code execution when copying and pasting content from the web or other documents with markup into the editor. The vulnerability stems from improper sanitization of…

    basecamp trix trix actiontext npm RubyGems