Contents

---
gem: loofah
cve: 2019-15587
url: https://github.com/flavorjones/loofah/issues/171
title: Loofah XSS Vulnerability
date: 2019-10-22
description: |
  In the Loofah gem, through v2.3.0, unsanitized JavaScript may occur in
  sanitized output when a crafted SVG element is republished.

cvss_v3: 6.4
patched_versions:
  - ">= 2.3.1"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/loofah/CVE-2019-15587.yml