MEDIUM4.7
GHSA-g45g-g52h-39rg
Cross-site Scripting in Chartkick
Quick fix
GHSA-g45g-g52h-39rg — chartkick: upgrade to the fixed version with the command below.
bundle update chartkickDetails
The Chartkick gem through 3.1.0 for Ruby allows XSS.
Are you affected?
Enter the version of the package you're using.