18 Total advisories
18 Vulnerabilities
0 Malware
Dependency scanning
Check whether rails-html-sanitizer is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2026-73648
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
MEDIUM 6.1
CVE-2022-23518
Improper neutralization of data URIs may allow XSS in rails-html-sanitizer
HIGH 7.5
CVE-2022-23517
Inefficient Regular Expression Complexity in rails-html-sanitizer
MEDIUM 6.1
CVE-2022-32209
Rails::Html::Sanitizer vulnerable to Cross-site Scripting
MEDIUM 6.1
CVE-2022-23519
Possible XSS vulnerability with certain configurations of rails-html-sanitizer
MEDIUM 6.1
CVE-2022-23520
Possible XSS vulnerability with certain configurations of rails-html-sanitizer
UNKNOWN
CVE-2024-53989
rails-html-sanitizer has XSS vulnerability with certain configurations
UNKNOWN
CVE-2024-53988
rails-html-sanitizer has XSS vulnerability with certain configurations
UNKNOWN
CVE-2024-53987
rails-html-sanitizer has XSS vulnerability with certain configurations
UNKNOWN
CVE-2024-53986
rails-html-sanitizer has XSS vulnerability with certain configurations
UNKNOWN
CVE-2024-53985
rails-html-sanitize has XSS vulnerability with certain configurations
UNKNOWN
GHSA-77pc-q5q7-qg9h
Moderate severity vulnerability that affects rails-html-sanitizer
UNKNOWN
GHSA-qc8j-m8j3-rjq6
Moderate severity vulnerability that affects rails-html-sanitizer
MEDIUM 6.1
CVE-2015-7578
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM 6.1
CVE-2015-7580
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM 6.1
CVE-2018-3741
rails-html-sanitizer Cross-site Scripting vulnerability
MEDIUM 6.1
CVE-2015-7579
rails-html-sanitizer Cross-site Scripting vulnerability
UNKNOWN
GHSA-mrhj-2g4v-39qx
Moderate severity vulnerability that affects rails-html-sanitizer
Browse more RubyGems advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes