Search for packages
| purl | pkg:gem/actionview@5.2.6.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-8167
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails rails-ujs module that could allow attackers to send CSRF tokens … |
Vulnerable |
|
CVE-2023-23913
Aliases: GHSA-xp5h-f8jf-rc8q |
DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements NOTE: rails-ujs is part of Rails/actionview since 5.1.0. There is … | There are no reported fixed by versions. |
|
CVE-2016-6316
Aliases: GHSA-pc3m-v286-2jwj |
Possible XSS Vulnerability in Action View There is a possible XSS vulnerability in Action View. Text declared as "HTML safe" … | There are no reported fixed by versions. |
|
GHSA-v55j-83pf-r9cq
Aliases: CVE-2026-33168 |
Rails has a possible XSS vulnerability in its Action View tag helpers ### Impact When a blank string is used … |
Vulnerable |
|
GHSA-xp5h-f8jf-rc8q
Aliases: CVE-2023-23913 |
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements NOTE: rails-ujs is part of Rails/actionview since 5.1.0. There is … |
Vulnerable |
|
CVE-2026-33168
Aliases: GHSA-v55j-83pf-r9cq |
Rails has a possible XSS vulnerability in its Action View tag helpers When a blank string is used as an … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-ch3h-j2vf-95pv
Aliases: CVE-2022-27777 GMS-2022-1138 |
XSS Vulnerability in Action View tag helpers There is a possible XSS vulnerability in Action View tag helpers. Passing untrusted … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |