LP
Vendor
Loofah Project
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-23518 | LO Loofah Loofah Project | 6.1 | Dec 14 | rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications |
| CVE-2022-23516 | LO Loofah Loofah Project | 7.5 | Dec 14 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri |
| CVE-2022-23515 | LO Loofah Loofah Project | 6.1 | Dec 14 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri |
| CVE-2022-23514 | LO Loofah Loofah Project | 7.5 | Dec 14 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri |
| CVE-2019-15587 | LO Loofah Loofah Project | 5.4 | Oct 22 | In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished |
| CVE-2018-16468 | LO Loofah Loofah Project | 5.4 | Oct 30 | In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished |
| CVE-2018-8048 | LO Loofah Loofah Project | 6.1 | Mar 27 | In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment |