ruby-loofah vulnerabilities (Debian)
9 vulnerabilities.
-
ruby-loofahDebian Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low -
ruby-loofahDebian Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium -
ruby-loofahDebian Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low -
ruby-loofahDebian Uncontrolled Recursion in Loofah 7.5 High -
ruby-loofahDebian Improper neutralization of data URIs may allow XSS in Loofah 6.1 Medium -
ruby-loofahDebian Inefficient Regular Expression Complexity in Loofah 7.5 High -
ruby-loofahDebian Loofah Allows Cross-site Scripting 5.4 Medium -
ruby-loofahDebian Loofah Cross-site Scripting vulnerability 5.4 Medium -
ruby-loofahDebian Cross-site Scripting in loofah 6.1 Medium