debian/ruby-redcloth vulnerabilities

Latest debian/ruby-redcloth CVEs

Newest publication first

1. DLA-3480-1 ruby-redcloth - security update

   Published 2023-07-06

   Unknown

2. CVE-2023-31606 RedCloth Regular Expression Denial of Service issue

   Published 2023-06-06

   High·CVSS 7.5 PoC

   A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

3. DSA-3168-1 ruby-redcloth - security update

   Published 2015-02-22

   Unknown

4. CVE-2012-6684 RedCloth Cross-site Scripting vulnerability

   Published 2015-01-08

   Medium·CVSS 4.3 PoC

   Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.