Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/govuk_tech_docs@1.4.0
purl pkg:gem/govuk_tech_docs@1.4.0
Next non-vulnerable version 3.3.1
Latest non-vulnerable version 3.3.1
Risk 2.8
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fsek-s7an-3yhj
Aliases:
CVE-2024-22048
GHSA-x2xw-hw8g-6773
GMS-2023-1026
govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.
3.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T09:23:14.634972+00:00 Ruby Importer Affected by VCID-fsek-s7an-3yhj https://github.com/rubysec/ruby-advisory-db/blob/master/gems/govuk_tech_docs/CVE-2024-22048.yml 38.6.0