VulnerableCode Package Details - pkg:gem/actionview@4.3

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:gem/actionview@4.3

Essentials
History (1)

purl	pkg:gem/actionview@4.3
Tags	Ghost

Next non-vulnerable version	6.1.7.3
Latest non-vulnerable version	8.1.2.1
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-86jq-2md2-d7ah Aliases: CVE-2016-6316 GHSA-pc3m-v286-2jwj	Possible XSS Vulnerability in ActionView There is a possible XSS vulnerability in Action View. Text declared as `HTML safe` will not have quotes escaped when used as attribute values in tag helpers.	5.0.0.1 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T15:18:16.559595+00:00	Ruby Importer	Affected by	VCID-86jq-2md2-d7ah	https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-6316.yml	38.0.0