Skip to content

Commit 75e23ae

Browse files
GUIreedloden
authored andcommitted
Add CVE-2019-15587 for Loofah (#420)
1 parent d074fb8 commit 75e23ae

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

gems/loofah/CVE-2019-15587.yml

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
gem: loofah
3+
cve: 2019-15587
4+
url: https://github.com/flavorjones/loofah/issues/171
5+
title: Loofah XSS Vulnerability
6+
date: 2019-10-22
7+
description: |
8+
In the Loofah gem, through v2.3.0, unsanitized JavaScript may occur in
9+
sanitized output when a crafted SVG element is republished.
10+
11+
cvss_v3: 6.4
12+
patched_versions:
13+
- ">= 2.3.1"

0 commit comments

Comments
 (0)