action_text-trix
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Trix has a Stored XSS vulnerability through serialized attributes | trixaction_text-trix | npmRubyGems | Medium | Fix reported | |
| Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController) | trixaction_text-trix | npmRubyGems | Low | Fix reported | |
| Trix has a stored XSS vulnerability through its attachment attribute | trixaction_text-trix | npmRubyGems | Medium | Fix reported | |
| Trix: Stored XSS via HTMLParser attribute injection on paste | trixaction_text-trix | npmRubyGems | Medium | Fix reported |