phlex
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Phlex vulnerable to Cross-site Scripting (XSS) via maliciously formed HTML attribute names and values | phlex | RubyGems | High | Fix reported | |
| Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags | phlex | RubyGems | High | Fix reported | |
| Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex | phlex | RubyGems | High | Fix reported | |
| Phlex XSS protection bypass via attribute splatting, dynamic tags, and href values | phlex | RubyGems | High | Fix reported |