Skip to content

update rails-html-sanitizer to >= 1.7.2 #3075

Closed

Description

@davidmillen50

Github CI is failing related to rails-html-sanitizer as below

Name: rails-html-sanitizer
Version: 1.7.1
GHSA: GHSA-cpgf-5mjf-73p7
Criticality: Medium
URL: GHSA-cpgf-5mjf-73p7
Title: Possible regular expression denial of service with certain configurations of rails-html-sanitizer
Solution: update to '>= 1.7.2'

Name: rails-html-sanitizer
Version: 1.7.1
GHSA: GHSA-h7wh-q2qr-458c
Criticality: Medium
URL: GHSA-h7wh-q2qr-458c
Title: Possible XSS via shared scrubber state in concurrent rails-html-sanitizer calls
Solution: update to '>= 1.7.2'

Activity

  1. davidmillen50 commented on Nov 2, 2026

    @davidmillen50
    ContributorAuthor
  2. mroderick commented on Nov 2, 2026

    @mroderick
    Collaborator

    This has been fixed with #3078

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions