Skip to content
OpenAdvisories

Ecosystem

RubyGems

1,115 known vulnerabilities.

Most affected packages

actionpack 66 nokogiri 60 rack 54 rubygems-update 25 activerecord 23 puppet 23 activesupport 19 publify_core 15 camaleon_cms 15 activestorage 15 rails-html-sanitizer 15 passenger 14 puma 14 decidim 13 actionview 13 openc3 11 fat_free_crm 11 rails 11 loofah 11 oj 11 ruby-saml 10 net-imap 10 jquery-rails 9 decidim-core 9 katello 8 avo 8 spree 8 rexml 8 lodash-rails 7 fluentd 7 bootstrap 7 bootstrap-sass 7 jquery-ui-rails 7 webrick 6 json 6 doorkeeper 6 ember-source 6 mcp 6 devise 6 view_component 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025