Search for packages
| purl | pkg:rpm/redhat/rh-ruby23-rubygem-nio4r@2.1.0-1?arch=el7cf |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-65ha-wgr4-eqd4
Aliases: CVE-2013-4492 GHSA-r5hc-9xx5-97rw |
Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. | There are no reported fixed by versions. |
|
VCID-rqh3-c53s-vuee
Aliases: CVE-2017-15125 |
cloudforms: XSS in self-service UI snapshot feature | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:49:18.260857+00:00 | RedHat Importer | Affected by | VCID-65ha-wgr4-eqd4 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json | 38.0.0 |
| 2026-04-01T14:26:39.460056+00:00 | RedHat Importer | Affected by | VCID-rqh3-c53s-vuee | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15125.json | 38.0.0 |