ALT-PU-2023-1337: package gem-rails-html-sanitizer update to version 1.5.0-alt1
Описание
This update upgrades gem-rails-html-sanitizer to version 1.5.0-alt1.
Устраненные уязвимости9
Ссылки6
GHSA-5x79-w82f-gw8w
https://github.com/advisories/GHSA-5x79-w82f-gw8wGHSA-9h9g-93gc-623h
https://github.com/advisories/GHSA-9h9g-93gc-623hGHSA-mcvf-2q2m-x72m
https://github.com/advisories/GHSA-mcvf-2q2m-x72mGHSA-pg8v-g4xq-hww9
https://github.com/advisories/GHSA-pg8v-g4xq-hww9GHSA-rrfc-7g8p-99q8
https://github.com/advisories/GHSA-rrfc-7g8p-99q8Связанные уязвимости
ALT-PU-2023-4269: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1
Множественные уязвимости rubygem-rails-html-sanitizer
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.