CVE-2026-128069

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Before 1.7.2, the HTML4 and HTML5 variants of Rails::HTML::SafeListSanitizer reuse one Rails::HTML::PermitScrubber across calls and mutate its tags and attributes without synchronization. In a multithreaded...

EUVD-2026-125593

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Before 1.7.2, the HTML4 and HTML5 variants of Rails::HTML::SafeListSanitizer reuse one Rails::HTML::PermitScrubber across calls and mutate its tags and attributes without synchronization. In a multithreaded...

CVE-2026-128069 rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent calls

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Before 1.7.2, the HTML4 and HTML5 variants of Rails::HTML::SafeListSanitizer reuse one Rails::HTML::PermitScrubber across calls and mutate its tags and attributes without synchronization. In a multithreaded...

CVE-2026-128069

The rails-html-sanitizer gem is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.7.2 . The root cause is a race condition where the HTML4 and HTML5 variants of Rails::HTML::SafeListSanitizer reuse a single Rails::HTML::PermitScrubber across calls without proper synchronization. In ...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the X.509 extension cache, which computes the cache under a read lock and then installs the result under a write lock, so concurrent threads each install their own result and free the previous one while another thread...