OPENSUSE-SU-2026:10340-1 ruby4.0-rubygem-actionview-8.0-8.0.3-1.3 on GA media

These are all security issues fixed in the ruby4.0-rubygem-actionview-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed...

Cross-site Scripting (XSS)

Overview actionview is a simple, battle-tested conventions and helpers for building web pages. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ActionView::Helpers and ERB::Util methods, due to improper escape of dangerous characters in names of tags and names ...