Chartkick Project: >> Chartkick >> 0.0.5 Security Vulnerabilities
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
CVSS Score
6.1
EPSS Score
0.002
Published
2020-08-05
The Chartkick gem through 3.1.0 for Ruby allows XSS.
CVSS Score
4.7
EPSS Score
0.003
Published
2019-06-06