CVE Tools
Track your stack

Loofah-project

4 CVEs tracked since 2022. Since Dec 2022, none of them reached CISA KEV.

Loofah-project CVEs per month

Dec 2022 to Dec 2022. Point at a month, or focus the strip and use the arrow keys.
Loofah-project CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2022-1240

Products

The products that kept showing up in Loofah-project's monthly top three, with their CVEs summed over those months.

  1. Loofah41 month

Latest CVEs

The 7 most recently published vulnerabilities affecting Loofah-project.

  1. CVE-2022-23518Improper neutralization of data URIs allows XSS in rails-html-sanitizer6.1
  2. CVE-2022-23516Uncontrolled Recursion in Loofah7.5
  3. CVE-2022-23515Improper neutralization of data URIs may allow XSS in Loofah6.1
  4. CVE-2022-23514Inefficient Regular Expression Complexity in Loofah7.5
  5. CVE-2019-15587In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.5.4
  6. CVE-2018-16468In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.5.4
  7. CVE-2018-8048In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.6.1

The record

Peak rank
#128 in Dec 2022
Busiest month shown
Dec 2022, 4 CVEs
Months with a KEV entry
0 since Dec 2022
Monthly snapshots
1 since 2022
Loofah-project's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store