Flavorjones

6 CVEs in 1 Flavorjones product, including Loofah. Newest: CVE-2026-73492 (2026-08-12). Severity, EPSS and public exploits for each.

Flavorjones products with known CVEs

ProductCVEs
Loofah6
Flavorjones CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-734922026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTM…
CVE-2026-734912026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.2, Loofah::HTM…
CVE-2026-73490Medium4.72026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.2, Loofah's HTML5 sanit…
CVE-2022-23516High7.52022-12-14Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.2.0, < 2.19.1 uses recurs…
CVE-2022-23515Medium6.12022-12-14Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.1.0, < 2.19.1 is vulnerab…
CVE-2022-23514High7.52022-12-14Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficie…