medium4.7
CVE-2019-12732
Cross-site Scripting in Chartkick
Impact
The Chartkick gem through 3.1.0 for Ruby allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | chartkick | < 3.2.0 | 3.2.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chartkick Project | Chartkick | through 3.1.0 |