Known vulnerabilities in rails-html-sanitizer

Vendor: Rails
Software: rails-html-sanitizer
Software CPE: cpe:2.3:a:rails:rails-html-sanitizer:*:*:*:*:*:ruby_on_rails:*:*
Website: https://rubyonrails.org/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rails-html-sanitizer rails-html-sanitizer is affected by 11 known vulnerabilities: 4 medium, 7 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53989		 CWE-79 Low
No
No
 1.6.1 05.12.2024 SB2024120545
SB2025021320
#VU101273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53988		 CWE-79 Low
No
No
 1.6.1 05.12.2024 SB2024120545
SB2025021320
#VU101270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53986		 CWE-79 Low
No
No
 1.6.1 05.12.2024 SB2024120545
SB2025021320
#VU101268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53987		 CWE-79 Low
No
No
 1.6.1 05.12.2024 SB2024120545
SB2025021320
#VU101267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53985		 CWE-79 Low
No
No
 1.6.1 05.12.2024 SB2024120545
SB2025021320
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520		 CWE-79 Medium
No
No
 1.4.4 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519		 CWE-79 Medium
No
No
 1.4.4 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518		 CWE-79 Medium
No
No
 1.4.4 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75786 - Incorrect Regular Expression
CVE-2022-23517		 CWE-185 Medium
No
No
 1.4.4 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 1 more
#VU66704 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-32209		 CWE-79 Low
No
No
 1.4.3 23.08.2022 SB2022082304
SB2022082309
SB2022082429
and 4 more
#VU11308 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3741		 CWE-79 Low
No
No
 - 26.03.2018 SB2018032811