We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d074fb8 commit 75e23aeCopy full SHA for 75e23ae
gems/loofah/CVE-2019-15587.yml
@@ -0,0 +1,13 @@
1
+---
2
+gem: loofah
3
+cve: 2019-15587
4
+url: https://github.com/flavorjones/loofah/issues/171
5
+title: Loofah XSS Vulnerability
6
+date: 2019-10-22
7
+description: |
8
+ In the Loofah gem, through v2.3.0, unsanitized JavaScript may occur in
9
+ sanitized output when a crafted SVG element is republished.
10
+
11
+cvss_v3: 6.4
12
+patched_versions:
13
+ - ">= 2.3.1"
0 commit comments