rubyonrails html sanitizer

Name: rubyonrails html sanitizer
Brand: rubyonrails

productUS

cpe:2.3:a:rubyonrails:html_sanitizer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high4medium0low

updated 2026-10-26

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-7579US	medium6.1	2.58% (85th)	—	no fix	2016-02-16	≤ 1.0.2
CVE-2015-7578US	medium6.1	2.48% (84th)	—	no fix	2016-02-16	≤ 1.0.2
CVE-2015-7580US	medium6.1	2.19% (82nd)	—	no fix	2016-02-16	≤ 1.0.2
CVE-2018-3741US	medium6.1	1.25% (69th)	—	no fix	2018-03-30	≤ 1.0.3

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.