GO-2024-2576 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, containerd, trino, kubeflow-katib, etcd-fips, k3s, kube-conformance, etcd, upwind-agent...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: consul-k8s, gitlab-rails-ce, gitlab-rails-ce-fips, backup-restore-operator, vault, rke2-runtime-fips, etcd-fips, terraform, cert-manager-fips, k3s, falco-no-driver, etcd...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, portieris, gitness, argocd-image-updater, envoy-gateway-fips, argocd-image-updater-fips, zot, portieris-fips, envoy-gateway, kots...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, portieris, gitness, argocd-image-updater, envoy-gateway-fips, argocd-image-updater-fips, zot, portieris-fips, envoy-gateway, kots...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, argo-cd, flux-fips, gitlab-rails-ce, external-secrets-operator-fips, external-secrets-operator, gitlab-rails-ce-fips, nemo, teleport, terragrunt, terragrunt-fips, grafana, flux, grafana-fips, guac, gitaly, upwind-agent...

Linux Distros Unpatched Vulnerability : CVE-2026-73648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...

CVE-2026-73426 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73490 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73427 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73426 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73427 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-73490 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pghero, ruby3.2-rails, ruby3.3-rails, pghero-fips, ruby4.0-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pghero, ruby3.2-rails, ruby3.3-rails, pghero-fips, ruby4.0-rails...

DEBIAN-CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...

CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...

CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...

UBUNTU-CVE-2026-73648

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...

CVE-2026-73648 rails-html-sanitizer: Possible XSS vulnerability with certain configurations

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG reference elements in SVGALLOWLOCALHREF only when they used xlink:href, even though browsers also accept the plain href attribute. Applicatio...