Search for packages
| purl | pkg:rpm/redhat/dumb-init@1.2.0-1?arch=el7cf |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5dmr-8tvd-8uen
Aliases: CVE-2018-11627 GHSA-mq35-wqvf-r23c |
Cross-site Scripting Sinatra has XSS via the Bad Request page that occurs upon a params parser exception. | There are no reported fixed by versions. |
|
VCID-sqa5-8yrd-qyfz
Aliases: CVE-2018-8048 GHSA-x7rv-cr6v-4vm4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In the Loofah gem for Ruby, denylisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. | There are no reported fixed by versions. |
|
VCID-xby9-avva-a3e5
Aliases: CVE-2018-3741 GHSA-px3r-jm9g-c8w8 |
XSS vulnerability The gem allows attributes that are not specified in the allowlist to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. | There are no reported fixed by versions. |
|
VCID-zrsc-vqxk-vkgx
Aliases: CVE-2012-6685 GHSA-6wj9-77wq-jq7p OSV-90946 |
Nokogiri is vulnerable to XML External Entity (XXE) attack Nokogiri before 1.5.4 is vulnerable to XXE attacks. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:55:28.546458+00:00 | RedHat Importer | Affected by | VCID-zrsc-vqxk-vkgx | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json | 38.0.0 |
| 2026-04-01T14:25:46.338086+00:00 | RedHat Importer | Affected by | VCID-sqa5-8yrd-qyfz | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json | 38.0.0 |
| 2026-04-01T14:25:45.341944+00:00 | RedHat Importer | Affected by | VCID-xby9-avva-a3e5 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json | 38.0.0 |
| 2026-04-01T14:24:36.454174+00:00 | RedHat Importer | Affected by | VCID-5dmr-8tvd-8uen | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json | 38.0.0 |