Search for packages
| purl | pkg:alpm/archlinux/ruby-rdoc@6.1.1-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-tmjp-8edk-nyh3
Aliases: CVE-2015-9251 GHSA-rmxg-73gg-4p98 |
The jQuery library, which is included in rdoc, is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing `text/javascript` responses to be executed. |
Affected by 0 other vulnerabilities. |
|
VCID-xdph-4cg9-6qah
Aliases: CVE-2012-6708 GHSA-2pqj-h3vj-pqgw |
The jQuery library, which is included in rdoc, is vulnerable to Cross-site Scripting (XSS) attacks. jQuery only deems the input to be HTML if it explicitly starts with the `<` character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T18:27:01.151404+00:00 | Arch Linux Importer | Affected by | VCID-xdph-4cg9-6qah | https://security.archlinux.org/AVG-1041 | 38.0.0 |
| 2026-04-01T18:27:01.125280+00:00 | Arch Linux Importer | Affected by | VCID-tmjp-8edk-nyh3 | https://security.archlinux.org/AVG-1041 | 38.0.0 |