CVE-2024-32463 phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

[
  {
    "vendor": "phlex-ruby",
    "product": "phlex",
    "versions": [
      {
        "version": ">= 1.10.0, < 1.10.1",
        "status": "affected"
      },
      {
        "version": ">= 1.9.0, < 1.9.2",
        "status": "affected"
      },
      {
        "version": ">= 1.8.0, < 1.8.3",
        "status": "affected"
      },
      {
        "version": ">= 1.7.0, < 1.7.2",
        "status": "affected"
      },
      {
        "version": ">= 1.6.0, < 1.6.3",
        "status": "affected"
      },
      {
        "version": ">= 1.5.0, < 1.5.3",
        "status": "affected"
      },
      {
        "version": ">= 1.4.0, < 1.4.2",
        "status": "affected"
      }
    ]
  }
]