CVE-2020-36624

Affected software/component: ahorner text-helpers (up to 1.0.x; patch lines reference 1.1.x) with vulnerable code in lib/text_helpers/translation.rb. Root cause: manipulation of the link argument leads to use of a web link to an untrusted target with window.opener access (reverse tabnabbing style...