Skip to content
OpenAdvisories

Package · RubyGems

actionview

17 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.3

    Rails has a possible XSS vulnerability in its Action View tag helpers

    Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed…