RA
Product
rails-ujs
by Rails · last CVE Jan 9, 2025
1
CVEs
0
On KEV
6.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add rails-ujs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-23913
6.3
1%
Jan 9
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute
Affected: 6.1.7.3 before 6.1.7.3; 7.0.4.3 before 7.0.4.3
Showing 1