Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

actiontext

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
RubyGems

Advisories 3

  • CVE-2024-47888Medium 6.6

    Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

    Affected: from 6.0.0, fixed in 6.1.7.9; from 7.0.0, fixed in 7.0.8.5; from 7.1.0, fixed in 7.1.4.1; from 7.2.0, fixed in 7.2.1.1.

  • CVE-2024-32464Medium 6.1

    ActionText ContentAttachment can Contain Unsanitized HTML

    Affected: from 7.1.0, fixed in 7.1.3.4; from 7.2.0.beta1, fixed in 7.2.0.beta2.

  • CVE-2024-34341Medium 5.4

    The Trix Editor Contains an Arbitrary Code Execution Vulnerability

    Affected: from 7.0.0.alpha1, fixed in 7.0.8.3; from 7.1.0.beta1, fixed in 7.1.3.3.