Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15587 4 Canonical, Debian, Fedoraproject and 1 more 4 Ubuntu Linux, Debian Linux, Fedora and 1 more 2024-11-21 5.4 Medium
In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVE-2018-8048 3 Debian, Loofah Project, Redhat 3 Debian Linux, Loofah, Cloudforms Managementengine 2024-11-21 N/A
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
CVE-2018-16468 2 Debian, Loofah Project 2 Debian Linux, Loofah 2024-11-21 N/A
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.