Threats Tagged 'ghsa-cj75-f6xr-r4g7'
View all threats tagged with 'ghsa-cj75-f6xr-r4g7'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-cj75-f6xr-r4g7'
Click on any threat for detailed analysis and mitigation recommendations
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations 0 A possible cross-site scripting (XSS) vulnerability exists in rails-html-sanitizer versions 1.0.3 through before 1.7.1 when configured to allow certain SVG reference elements such as <use> or <feImage>. The vulnerability arises because the sanitizer restricts local references only on the xlink:href attribute but not on the plain href attribute, which browsers accept per the SVG 2 specification. This can allow external SVG content or images to be loaded and potentially execute scripts in the context of the sanitized document. Applications using the default sanitizer configuration are not affected because these SVG elements are not allowed by default. Join the discussion | GCVE Database | 07/21/2026, 22:05:28 UTC Added: 07/22/2026, 00:11:09 UTC |
Showing 1 to 1 of 1 result