loofah vulnerabilities and fixes

Recent CVEs affecting loofah, with upgrade or downgrade steps. 4 tracked.

loofah has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-12-14. Highest priority: CVE-2022-23514 (score 51/100).

• CVE-2022-23518 MEDIUM 6.1 UPGRADE MITIGATE rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications
• CVE-2022-23516 HIGH 7.5 UPGRADE Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o
• CVE-2022-23515 MEDIUM 6.1 UPGRADE MITIGATE Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o
• CVE-2022-23514 HIGH 7.5 UPGRADE Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o

FAQ

How do I fix loofah vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is loofah being exploited right now?

None of the tracked loofah CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which loofah CVE should I patch first?

CVE-2022-23514 currently ranks highest (51/100): Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top o.

RSS feed for loofah · ← Back to latest CVEs