phlex-ruby vulnerabilities
3 published CVEs name phlex-ruby among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-32970
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
phlex-ruby · phlex
High7.1 - CVE-2024-32463
phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
phlex-ruby · phlex
High7.1 - CVE-2024-28199
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
phlex-ruby · phlex
High7.1