1.0.7

DATE	CVE	VULNERABILITY TITLE	RISK
2018-03-30	CVE-2018-3740	Improper Input Validation vulnerability in Sanitize Project Sanitize A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element. network low complexity sanitize-project CWE-20	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.