openSUSE-SU-2026:10353-1

ruby4.0-rubygem-loofah-2.23.1-1.5 on GA media

view advisory published 2026-03-13

ruby4.0-rubygem-loofah-2.23.1-1.5 on GA media

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-23516US	high7.5	1.17% (67th)	—	2022-12-14
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.2.0, < 2.19.1 uses recursion for sanitizing CD…
CVE-2022-23515US	medium6.1	0.86% (58th)	—	2022-12-14
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.1.0, < 2.19.1 is vulnerable to cross-site scri…
CVE-2022-23514US	high7.5	1.83% (79th)	—	2022-12-14
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficient regular expression…
CVE-2019-15587US	medium5.4	1.56% (75th)	—	2019-10-22
In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVE-2018-16468US	medium5.4	0.92% (60th)	—	2018-10-30
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVE-2018-8048US	medium6.1	1.93% (80th)	—	2018-03-27
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

references

External citations — patches, advisories, analysis.

remediations (24)

Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.aarch64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.ppc64le as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.s390x as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedruby4.0-rubygem-loofah-0:2.23.1-1.5.x86_64 as component of openSUSE Tumbleweed
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan