Skip to content
OpenAdvisories

Vendor

ViewComponent

5 known vulnerabilities.

Products

view_component 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-54498

    view_component: around_render HTML-Safety Bypass

    view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base#around_render can return HTML-unsafe strings that bypass the escaping behavior applied to normal #ca…

    ViewComponent view_component view_component RubyGems