Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/jquery-rails@2.2
purl pkg:gem/jquery-rails@2.2
Tags Ghost
Next non-vulnerable version 4.4.0
Latest non-vulnerable version 4.4.0
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xdph-4cg9-6qah
Aliases:
CVE-2012-6708
GHSA-2pqj-h3vj-pqgw
The jQuery library, which is included in rdoc, is vulnerable to Cross-site Scripting (XSS) attacks. jQuery only deems the input to be HTML if it explicitly starts with the `<` character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T15:18:36.707700+00:00 Ruby Importer Affected by VCID-xdph-4cg9-6qah https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2012-6708.yml 38.0.0