Search for packages
| purl | pkg:gem/actionview@5.2.4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-8167
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens … |
Vulnerable |
|
CVE-2023-23913
Aliases: GHSA-xp5h-f8jf-rc8q |
DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements NOTE: rails-ujs is part of Rails/actionview since 5.1.0. There is … | There are no reported fixed by versions. |
|
CVE-2016-6316
Aliases: GHSA-pc3m-v286-2jwj |
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … | There are no reported fixed by versions. |
|
GHSA-v55j-83pf-r9cq
Aliases: CVE-2026-33168 |
Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used … |
Vulnerable |
|
GHSA-xp5h-f8jf-rc8q
Aliases: CVE-2023-23913 |
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements NOTE: rails-ujs is part of Rails/actionview since 5.1.0. There is … |
Vulnerable |
|
CVE-2026-33168
Aliases: GHSA-v55j-83pf-r9cq |
Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-cfjv-5498-mph5
Aliases: CVE-2020-15169 |
XSS in Action View There is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-65cv-r6x7-79hv
Aliases: CVE-2020-5267 |
Cross site scripting vulnerability in ActionView There is a possible cross site scripting (XSS) vulnerability in ActionView's JavaScript literal escape … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-xq5j-gw7f-jgj8
Aliases: CVE-2020-8167 |
CSRF Vulnerability in rails-ujs There is a vulnerability in rails-ujs that allows attackers to send CSRF tokens to wrong domains. … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-ch3h-j2vf-95pv
Aliases: CVE-2022-27777 GMS-2022-1138 |
XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |