CyberSecBulletin

Flavorjones vulnerabilities

We track 2 vulnerabilities in Flavorjones products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 14, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Flavorjones vulnerabilities

  • 7.5 High severity

    loofah: Uncontrolled Recursion

    CVE-2022-23516FlavorjonesEPSS 1.17%

    Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.2.0, < 2.19.1 uses recursion for sanitizing CDATA sections, making it susceptible to stack exhaustion and raising a SystemStac

  • 7.5 High severity

    loofah: Inefficient Regular Expression Complexity

    CVE-2022-23514FlavorjonesEPSS 1.83%

    Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certa