secure_headers vulnerabilities (RubyGems)

3 vulnerabilities.

• secure_headers RubyGems secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input CVE-2026-54163 Fix available 4.7 MediumJuly 10, 2026
• secure_headers RubyGems Limited header injection when using dynamic overrides with user input in RubyGems secure_headers CVE-2020-5216 Fix available 4.4 MediumJanuary 23, 2020
• secure_headers RubyGems Directive injection when using dynamic overrides with user input in RubyGems secure_headers CVE-2020-5217 Fix available 4.4 MediumJanuary 23, 2020