loofah vulnerabilities

2 known vulnerabilities in loofah from Flavorjones. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  loofah: Uncontrolled Recursion

  CVE-2022-23516Dec 14, 2022FlavorjonesEPSS 1.17%

  Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah >= 2.2.0, < 2.19.1 uses recursion for sanitizing CDATA sections, making it susceptible to stack exhaustion and raising a SystemStac

• 7.5 High severity

  loofah: Inefficient Regular Expression Complexity

  CVE-2022-23514Dec 14, 2022FlavorjonesEPSS 1.83%

  Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah < 2.19.1 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certa