CVE-2019-15587.yml

---
gem: loofah
cve: 2019-15587
ghsa: c3gv-9cxf-6f57
url: https://github.com/flavorjones/loofah/issues/171
title: Loofah XSS Vulnerability
date: 2019-10-22
description: |
  In the Loofah gem, through v2.3.0, unsanitized JavaScript may occur in
  sanitized output when a crafted SVG element is republished.
cvss_v3: 6.4
patched_versions:
  - ">= 2.3.1"