Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-73427
  • github.com/basecamp/trix
 Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController) 12 Aug
  • Fix available
  • Severity - 2.1 (Low)
CGA-pvcm-mxgr-m7xq
  • Chainguard/ruby4.0-rails-8.1
  • Wolfi/ruby4.0-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-jp2g-vg73-hc7f
  • Chainguard/ruby3.4-rails-8.1
  • Wolfi/ruby3.4-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-5vg7-4h86-m5rh
  • Chainguard/ruby3.3-rails-8.1
  • Wolfi/ruby3.3-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-39h4-4833-xqx9
  • Chainguard/ruby4.0-rails-8.1
  • Wolfi/ruby4.0-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-pp8r-c2cr-gr6x
  • Chainguard/ruby3.3-rails-8.1
  • Wolfi/ruby3.3-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-7m5h-h7ww-x36j
  • Chainguard/ruby3.2-rails-8.1
  • Wolfi/ruby3.2-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-5j73-h4mq-v7hc
  • Chainguard/ruby3.4-rails-8.1
  • Wolfi/ruby3.4-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
CGA-7w93-3wfv-c3cm
  • Chainguard/ruby3.2-rails-8.1
  • Wolfi/ruby3.2-rails-8.1
 See record for full details 30 Mar
  • Fix available
  • Severity - 2.1 (Low)
GHSA-53p3-c7vp-4mcc
  • RubyGems/action_text-trix
  • npm/trix
 Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController) 29 Mar
  • Fix available
  • Severity - 2.1 (Low)