Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

view_component

6 known vulnerabilities (2 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 2 high, 4 medium
Registry
RubyGems

Advisories 6

  • view_component: around_render HTML-Safety Bypass

    Affected: from 4.0.0, fixed in 4.12.0.

  • CVE-2026-54497Medium 6.8

    view_component: Reused Component Instances Retain Stale Render Context

    Affected: from 4.0.0, fixed in 4.12.0.

  • CVE-2026-44836Medium 6.5

    view_component: Preview Route Can Dispatch Inherited Helper Methods

    Affected: from 3.0.0, fixed in 4.9.0.

  • CVE-2026-44837Medium 5.9

    view_component: System Test Entry Point Path Check Allows Sibling Directory Escape

    Affected: from 3.0.0, fixed in 4.9.0.

  • CVE-2024-21636Medium 6.1

    view_component Cross-site Scripting vulnerability

    Affected: from 3.0.0, fixed in 3.9.0; fixed in 2.83.0.

  • Cross-site Scripting in view_component

    Affected: from 2.31.0, fixed in 2.31.2; from 2.32.0, fixed in 2.49.1.