MEDIUM 5.4 RubyGems
Loofah Cross-site Scripting vulnerability
GHSA-g4xq-jx4w-4cjv · CVE-2018-16468
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
In the Loofah gem for Ruby, through version 2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. Users are advised to upgrade to version 2.2.3.
See https://github.com/flavorjones/loofah/issues/154 for more details.
Ready to move
Start Securing
Free, no credit card | First findings in minutes