Skip to content
Not rated

CVE-2018-16468 In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG…

Description

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Affected products and versions

Product Affected versions Fixed in
Loofah (Ruby Gem) 2.2.3 No fix stated
Track this CVE