Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/ember-source@1.4.0.beta.6
purl pkg:gem/ember-source@1.4.0.beta.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-42k5-zsk1-5fcb ember-source Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute. CVE-2014-0046
GHSA-4q53-fqhc-cr46

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:38:12.555999+00:00 GitLab Importer Fixing VCID-42k5-zsk1-5fcb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/ember-source/CVE-2014-0046.yml 38.6.0