VendorsSanitize Projectsanitizeany version
Vulnerabilities

Sanitize Project Sanitize any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2018-3740
A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.
Published 2018-03-30 · Modified
7.5EPSS 0.015
CVE-2020-4054
Cross-site Scripting in Sanitize
Published 2020-06-16 · Modified
7.3EPSS 0.019
CVE-2023-36823
Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
Published 2023-07-06 · Modified
7.1EPSS 0.007
CVE-2023-23627
Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element
Published 2023-01-27 · Modified
6.1EPSS 0.005