Chartkick Project Chartkick
2 CVEs affecting Chartkick Project Chartkick. Latest disclosed: 2020-08-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-16254 | Medium | 6.1 | 2020-08-05 | The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). |
CVE-2019-12732 | Medium | 4.7 | 2019-06-06 | The Chartkick gem through 3.1.0 for Ruby allows XSS. |