Contents

---
gem: loofah
cve: 2018-8048
url: https://github.com/flavorjones/loofah/issues/144
title: Loofah XSS Vulnerability
date: 2018-03-16
description: |
  Loofah allows non-whitelisted attributes to be present in sanitized
  output when input with specially-crafted HTML fragments.
patched_versions:
  - ">=  2.2.1"

Version data entries

3 entries across 3 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/loofah/CVE-2018-8048.yml
bundler-budit-0.6.2	data/ruby-advisory-db/gems/loofah/CVE-2018-8048.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/loofah/CVE-2018-8048.yml