Sanitize Project Sanitize
4 CVEs affecting Sanitize Project Sanitize. Latest disclosed: 2023-07-06. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3740 | High | 7.5 | 2018-03-30 | A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element. |
CVE-2020-4054 | High | 7.3 | 2020-06-16 | In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using… |
CVE-2023-36823 | High | 7.1 | 2023-07-06 | Sanitize is an allowlist-based HTML and CSS sanitizer. Using carefully crafted input, an attacker may be able to sneak arbitrary HTML and CSS through Sanitize… |
CVE-2023-23627 | Medium | 6.1 | 2023-01-28 | Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is confi… |