GHSA-cj75-f6xr-r4g7 (rails-html-sanitizer): Possible XSS vulnerability with certain configurations of rails-html-sanitizer
21-Jul-2026 1
Originally appeared on RubySec.## Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rail...
GHSA-cj75-f6xr-r4g7 (rails-html-sanitizer): Possible XSS vulnerability with certain configurations of rails-html-sanitizer #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #ghsa-cj75-f6xr-r4g7 #(rails-html-sanitizer): #vulnerability https://www.rubyonrails.ba/link/ghsa-cj75-f6xr-r4g7-rails-html-sanitizer-possible-xss-vulnerability-with-certain-configurations-of-rails-html-sanitizer