Cross-site Scripting (XSS)

haml is vulnerable to cross-site scripting XSS attacks. The attack is possible because the parameter hash is not properly encoded when a specific key is not used...

Man In The Middle (mitm)

haml-rails is vulnerable to man-in-the-middle MitM attacks. The gemcutter source is deprecated because HTTP requests are insecure. A malicious user can potentially compromise the source to conduct MitM attacks...