Skip to content
OpenAdvisories

Product · GitHub

secure_headers

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium 4.7
    CVE-2026-54163

    secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

    secure_headers manages application of security headers with many safe defaults. Prior to 7.3.0, secure_headers builds the Content-Security-Policy value by stitching directives with ; separators, and build_sandbox_list_directive, build_media_type_list_directiv…

    GitHub secure_headers ruby-secure-headers secure_headers Debian Ubuntu RubyGems