What’s Vulnerable › Products

rails-html-sanitizer vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your rails-html-sanitizer version is affected

Latest rails-html-sanitizer vulnerabilities

• CVE-2026-73648 — rails-html-sanitizer: Possible XSS vulnerability with certain configurations (CVSS 5.1)
• CVE-2024-53988 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 6.1)
• CVE-2024-53987 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 6.1)
• CVE-2024-53986 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 6.1)
• CVE-2024-53985 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 6.1)
• CVE-2024-53989 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 6.1)
• CVE-2022-23520 — rails-html-sanitizer contains an incomplete fix for an XSS vulnerability (CVSS 6.1)
• CVE-2022-23519 — Possible XSS vulnerability with certain configurations of rails-html-sanitizer (CVSS 6.1)
• CVE-2022-23518 — Improper neutralization of data URIs allows XSS in rails-html-sanitizer (CVSS 6.1)
• CVE-2022-23517 — Inefficient Regular Expression Complexity in rails-html-sanitizer (CVSS 7.5)
• CVE-2022-32209 — Rails::Html::Sanitizer vulnerable to Cross-site Scripting (CVSS 6.1)