- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 medium, 1 low
- Registry
- RubyGems
Advisories 3
- CVE-2026-73426Medium 4.6
Trix: Stored XSS vulnerability through serialized attributes
Affected: fixed in 2.1.17.
- CVE-2026-73428Medium 4.6
Trix: Stored XSS via HTMLParser attribute injection on paste
Affected: fixed in 2.1.18.
- CVE-2026-73427Low 2.1
Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)
Affected: fixed in 2.1.18.