Description
The Chartkick gem through 3.1.0 for Ruby allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | chartkick | < 3.2.0 | 3.2.0 | GHSA-g45g-g52h-39rg |
Medium · 4.7
CVE-2019-12732
EUVD-2019-0534GHSA-g45g-g52h-39rg
Cross-site Scripting in Chartkick
Published Jun 6, 2019 · Updated Aug 4, 2024 · Assigned by mitre