File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ ---
2+ gem : blazer
3+ ghsa : m5f6-4589-m89f
4+ url : https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f
5+ title : Stored XSS vulnerability
6+ date : 2026-07-27
7+ description : |
8+ An authenticated user can create a malicious query that executes arbitrary
9+ JavaScript when another user tries to edit the query. This can be used to
10+ perform actions as the other user for resources on the same origin.
11+ patched_versions :
12+ - " >= 3.5.0"
13+ unaffected_versions :
14+ - " < 1.7.3"
15+ cvss_v3 : 5.4
16+ related :
17+ url :
18+ - https://rubygems.org/gems/blazer/versions/3.5.0
19+ - https://github.com/ankane/blazer/blob/master/CHANGELOG.md#350-2026-07-27
20+ - https://github.com/ankane/blazer/compare/v3.4.0...v3.5.0
21+ - https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f
22+ notes : |
23+ - cvss_v3 from project GHSA
24+ - No CVE
You can’t perform that action at this time.
0 commit comments