loofah vulnerabilities (RubyGems)
11 vulnerabilities.
-
loofahRubyGems Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low -
loofahRubyGems Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium -
loofahRubyGems Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low -
loofahRubyGems Loofah has improper detection of disallowed URIs via `allowed_uri?` 2.3 Low -
loofahRubyGems Improper detection of disallowed URIs by Loofah `allowed_uri?` 2.7 Low -
loofahRubyGems Uncontrolled Recursion in Loofah 7.5 High -
loofahRubyGems Improper neutralization of data URIs may allow XSS in Loofah 6.1 Medium -
loofahRubyGems Inefficient Regular Expression Complexity in Loofah 7.5 High -
loofahRubyGems Loofah Allows Cross-site Scripting 5.4 Medium -
loofahRubyGems Loofah Cross-site Scripting vulnerability 5.4 Medium -
loofahRubyGems Cross-site Scripting in loofah 6.1 Medium