Skip to content
OpenAdvisories

Package · RubyGems

chartkick

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.1
    CVE-2020-16254

    CSS Injection in Chartkick gem

    The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

    chartkick RubyGems
  • High 7.3
    CVE-2019-18841

    Prototype Pollution in chartkick

    Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

    chartkick chartkick npm RubyGems
  • Medium 4.7
    CVE-2019-12732

    Cross-site Scripting in Chartkick

    The Chartkick gem through 3.1.0 for Ruby allows XSS.

    chartkick RubyGems