phlex-ruby/phlex Security Advisories | GitStock

high2024-05-01

Phlex vulnerable to Cross-site Scripting (XSS) via maliciously formed HTML attribute names and values

GHSA-9p57-h987-4vgx · CVE-2024-32970

high2024-04-17

Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags

GHSA-g7xq-xv8c-h98c · CVE-2024-32463

high2024-03-12

Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex

GHSA-242p-4v39-2v8g · CVE-2024-28199