Skip to content
OpenAdvisories

Package · RubyGems

chartkick

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-16254

    CSS Injection in Chartkick gem

    The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

    chartkick RubyGems
  • Medium 4.7
    CVE-2019-12732

    Cross-site Scripting in Chartkick

    The Chartkick gem through 3.1.0 for Ruby allows XSS.

    chartkick RubyGems