MEDIUM6.5RubyGems
GHSA-7f3r-gwc9-2995· CVE-2026-44836view_component: Preview Route Can Dispatch Inherited Helper Methods
Modified: 9/10/2026
package
RubyGems/view_component
pkg:rubygems/view_component
HIGH8.7RubyGems
GHSA-97jw-64cj-jc58· CVE-2026-54498ViewComponent: around_render HTML-Safety Bypass
Modified: 7/15/2026
MEDIUM6.8RubyGems
GHSA-9h85-g7w3-rh49· CVE-2026-54497ViewComponent: Reused Component Instances Retain Stale Render Context
Modified: 7/15/2026
HIGH8.1RubyGems
GHSA-cm9w-c4rj-r2cf· CVE-2022-24722Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component
Modified: 2/16/2024
MEDIUM5.9RubyGems
GHSA-hg3h-g7xc-f7vp· CVE-2026-44837view_component: System Test Entry Point Path Check Allows Sibling Directory Escape
Modified: 9/10/2026
MEDIUM6.1RubyGems
GHSA-wf2x-8w6j-qw37· CVE-2024-21636view_component Cross-site Scripting vulnerability
Modified: 9/10/2026