FLAT-O35J3 (CVE-2026-73492)
OS Command Injection In ruby-loofah
0.6
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-JMUPA (CVE-2026-73491)
Lack of data validation In ruby-loofah
0.6
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-4FKNO (CVE-2026-73490)
Reflected cross-site scripting (XSS) In ruby-loofah
1.7
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-2GV6Q (DLA-3901-1)
Lack of data validation In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-EQTTS (DLA-3565-1)
Server side cross-site scripting In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-KDJQO (CVE-2022-23515)
Reflected cross-site scripting (XSS) In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-9N3EK (CVE-2022-23514)
Asymmetric denial of service - ReDoS In ruby-loofah
6.6
Medium
Ecosystem: Debian
Component: ruby-loofah
FLAT-MLENA (CVE-2022-23516)
Improper resource allocation In ruby-loofah
6.6
Medium
Ecosystem: Debian
Component: ruby-loofah
FLAT-X3GP7 (DSA-4554-1)
Lack of data validation In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-L5969 (DSA-4364-1)
Lack of data validation In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-KD43O (DSA-4171-1)
Lack of data validation In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah
FLAT-J7PDE (CVE-2018-8048)
Reflected cross-site scripting (XSS) In ruby-loofah
1.3
Low
Ecosystem: Debian
Component: ruby-loofah