Rgrove Sanitize
3 CVEs affecting Rgrove Sanitize. Latest disclosed: 2023-07-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-4054 | High | 7.3 | 2020-06-16 | In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using… |
CVE-2023-36823 | High | 7.1 | 2023-07-06 | Sanitize is an allowlist-based HTML and CSS sanitizer. Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS through Sanitize… |
CVE-2023-23627 | Medium | 6.1 | 2023-01-28 | Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is confi… |