Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-8048
4.3
MEDIUMCVSS v2
Published
March 27, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
GitHub