HIGH7.1RubyGems
GHSA-242p-4v39-2v8g· CVE-2024-28199Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
Modified: 9/10/2026
package
RubyGems/phlex
pkg:rubygems/phlex
HIGH7.1RubyGems
GHSA-9p57-h987-4vgx· CVE-2024-32970Phlex vulnerable to Cross-site Scripting (XSS) via maliciously formed HTML attribute names and values
Modified: 9/10/2026
HIGH7.1RubyGems
GHSA-g7xq-xv8c-h98c· CVE-2024-32463Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
Modified: 9/10/2026
HIGH7.1RubyGems
GHSA-w67g-2h6v-vjgqPhlex XSS protection bypass via attribute splatting, dynamic tags, and href values
Modified: 2/6/2026