phlex vulnerabilities

2 known vulnerabilities in phlex from Phlex-ruby. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  phlex: Improper Neutralization of Input During Web Page Generation

  CVE-2024-32970Apr 30, 2024Phlex-ruby

  Phlex is a framework for building object-oriented views in Ruby. In affected versions there is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. Since the last two vulnerabilities https://github.com/p

• 7.1 High severity

  phlex: Improper Neutralization of Input During Web Page Generation

  CVE-2024-32463Apr 17, 2024Phlex-ruby

  phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the `javascript:` U