Skip to content
OpenAdvisories

Package · RubyGems

view_component

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-54498

    view_component: around_render HTML-Safety Bypass

    view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base#around_render can return HTML-unsafe strings that bypass the escaping behavior applied to normal #ca…

    ViewComponent view_component view_component RubyGems
  • High 8.1
    CVE-2022-24722

    Cross-site Scripting in view_component

    VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain a cross-site scripting vulnerability that has the potential to impact anyone using translations with the view_component gem. Data received …

    GitHub view_component view_component RubyGems