ViewComponent vulnerabilities
We track 2 vulnerabilities in ViewComponent products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest ViewComponent vulnerabilities
- 8.7 High severity
view_component: Improper Neutralization of Input During Web Page Generation
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Base#around_render can return HTML-unsafe strings that bypass the escaping behavior applied to normal #cal
- 7.5 High severity
view_component: Partial String Comparison
view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint canonicalizes a user-controlled file path with File.realpath, then checks whether the resolved pat