Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2020-16254 — MEDIUM severity vulnerability | Release Alert

CVE-2020-16254

6.1

MEDIUMCVSS v3

Published

August 5, 2020

CVSS v2

4.3 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

RubyGemsCreate beautiful JavaScript charts with one line of Ruby

<= 3.3.2, < 3.4.0NVD

ankane/chartkick

GitHubCreate beautiful JavaScript charts with one line of Ruby

<= 3.3.2, < 3.4.0NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Create beautiful JavaScript charts with one line of Python

<= 3.3.2, < 3.4.0NVD

NPMCreate beautiful charts with one line of JavaScript

<= 3.3.2, < 3.4.0NVD