rails-html-sanitizer: Possible regular expression denial of service with certain configurations

Summary Rails::HTML::PermitScrubber restricts the href and xlink:href attributes of SVG reference elements to local references. That check matched the attribute value against /^\s^\s./m. In Ruby ^ anchors to every line start and \s matches newlines, so an all-whitespace value made the engine resc...

GHSA-CPGF-5MJF-73P7 rails-html-sanitizer: Possible regular expression denial of service with certain configurations

Summary Rails::HTML::PermitScrubber restricts the href and xlink:href attributes of SVG reference elements to local references. That check matched the attribute value against /^\s^\s./m. In Ruby ^ anchors to every line start and \s matches newlines, so an all-whitespace value made the engine resc...

CVE-2026-128068 rails-html-sanitizer: Possible regular expression denial of service with certain configurations

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 through 1.7.1, Rails::HTML::PermitScrubber checks SVG href and xlink:href local references with a pattern whose line-start anchor and whitespace class cause an all-whitespace value to be rescanned...

CVE-2026-128068

The rails-html-sanitizer library (versions 1.0.3 through 1.7.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . The root cause lies in the Rails::HTML::PermitScrubber component, where a pattern used to check SVG href and xlink:href local references causes all-whitespace values t...

EUVD-2026-124678

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, the Loofah HTML5 sanitizer checks href and xlink:href on elements in SVGALLOWLOCALHREF with a regular expression whose line anchor and newline-matching...

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issue: CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements bsc1275199. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4445-1 Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements bsc1275199...

Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rails-html-sanitizer mirrors. - Versions affected: = 1.0.3...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the sanitization process when SVG reference elements such as or are included in the overridden allowed tags. An attacker can execute arbitrary scripts or load external resources by crafting SVG elements with...

PT-2026-63796

Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rails-html-sanitizer mirrors. - Versions affected: = 1.0.3...

Linux Distros Unpatched Vulnerability : CVE-2023-50262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that paths within the SVG are allowed. One o...