Flavorjones vulnerabilities
Products
- Loofah 6
Newest
- flavorjones loofah Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons 2.3 Low
- flavorjones loofah Loofah: SVG `href` attribute bypasses local-reference restriction 4.7 Medium
- flavorjones loofah Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references 2.3 Low
- flavorjones loofah Uncontrolled Recursion in Loofah 7.5 High
- flavorjones loofah, debian linux +1 more Improper neutralization of data URIs may allow XSS in Loofah 6.1 Medium
- flavorjones loofah Inefficient Regular Expression Complexity in Loofah 7.5 High