- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3
- Registry
- RubyGems
Advisories 3
- CVE-2020-16254Unrated
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
Affected: fixed in 3.4.0.
- CVE-2019-18841Unrated
Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.
Affected: fixed in 3.3.0.
- CVE-2019-12732Unrated
The Chartkick gem through 3.1.0 for Ruby allows XSS.
Affected: fixed in 3.2.0.