Vulnerabilities > Sanitize Project > Sanitize > High

DATE CVE VULNERABILITY TITLE RISK
2020-06-16 CVE-2020-4054 Unspecified vulnerability in Sanitize Project Sanitize
In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability.
network
low complexity
sanitize-project
7.3
2018-03-30 CVE-2018-3740 Improper Input Validation vulnerability in Sanitize Project Sanitize
A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.
network
low complexity
sanitize-project CWE-20
7.5