Search Vulnerabilities

Trix: Stored XSS via HTMLParser attribute injection on paste

Ruby json: JSON generator heap buffer overflow when streaming to an IO

Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons

Loofah: SVG `href` attribute bypasses local-reference restriction

websocket-driver-ruby: Denial of service via malformed Host header

Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references

Malicious code in my_shoaib_gem (RubyGems)

Malicious code in ike-artifactory-ruby (RubyGems)

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

ViewComponent: Reused Component Instances Retain Stale Render Context

ViewComponent: around_render HTML-Safety Bypass

websocket-driver: Memory exhaustion in HTTP header parser

websocket-driver: Resource limit bypass via message compression

websocket-driver: Memory exhaustion via abuse of protocol length headers

Decidim: Push subscriptions can be abused for server-side requests

Decidim: HTML content blocks allow stored script execution

Decidim: CSV census record endpoints improper authorization

Decidim: JWT-backed authentication can be replayed across organizations

Decidim: Verification documents can be downloaded through reusable links