File tree Expand file tree Collapse file tree
gems/rails-html-sanitizer Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ gem: rails-html-sanitizer
33cve : 2022-23519
44ghsa : 9h9g-93gc-623h
55url : https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
6- title : " Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6+ title : Possible XSS vulnerability with certain configurations of rails-html-sanitizer
77date : 2022-12-13
88description : |
99 ## Summary
@@ -67,9 +67,10 @@ description: |
6767 ## Workarounds
6868
6969 Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags.
70+ cvss_v3 : 6.1
7071patched_versions :
71- - " >= 1.4.4"
72+ - " >= 1.4.4"
7273related :
7374 url :
74- - https://cwe.mitre.org/data/definitions/79.html
75- - https://hackerone.com/reports/1656627
75+ - https://cwe.mitre.org/data/definitions/79.html
76+ - https://hackerone.com/reports/1656627
Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ gem: rails-html-sanitizer
33cve : 2022-23520
44ghsa : rrfc-7g8p-99q8
55url : https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
6- title : " Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6+ title : Possible XSS vulnerability with certain configurations of rails-html-sanitizer
77date : 2022-12-13
88description : |
99 ## Summary
@@ -46,11 +46,12 @@ description: |
4646 ## Workarounds
4747
4848 Remove either "select" or "style" from the overridden allowed tags.
49+ cvss_v3 : 6.1
4950patched_versions :
50- - " >= 1.4.4"
51+ - " >= 1.4.4"
5152related :
5253 cve :
53- - 2022-32209
54+ - 2022-32209
5455 url :
55- - https://cwe.mitre.org/data/definitions/79.html
56- - https://hackerone.com/reports/1654310
56+ - https://cwe.mitre.org/data/definitions/79.html
57+ - https://hackerone.com/reports/1654310
You can’t perform that action at this time.
0 commit comments