UNKNOWN RubyGems
Moderate severity vulnerability that affects rails-html-sanitizer
GHSA-77pc-q5q7-qg9h
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Withdrawn, accidental duplicate publish.
Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a crafted CDATA node.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes