Lucene search
Loofah ProjectLoofah*
2 matches found
CVE-2018-16468
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
5.4CVSS5.4AI score0.00314EPSS
CVE-2018-8048
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
6.1CVSS5.9AI score0.004EPSS