ruby-loofah vulnerabilities (Ubuntu)
8 vulnerabilities.
-
ruby-loofahUbuntu Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low -
ruby-loofahUbuntu Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium -
ruby-loofahUbuntu Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low -
ruby-loofahUbuntu Uncontrolled Recursion in Loofah 7.5 High -
ruby-loofahUbuntu Improper neutralization of data URIs may allow XSS in Loofah 6.1 Medium -
ruby-loofahUbuntu Inefficient Regular Expression Complexity in Loofah 7.5 High -
ruby-loofahUbuntu Loofah Allows Cross-site Scripting 5.4 Medium -
ruby-loofahUbuntu Loofah Cross-site Scripting vulnerability 5.4 Medium