loofah project
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 20, 2018 to present
7
Total CVEs
2
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
42/100
medium
Severity Distribution
Critical
0High
2Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
5
Most Affected Products
1. Loofah Project Loofah Ruby8
2. Debian Debian Linux6
3. redhat/rubygem-loofah6
4. rubygems/loofah4
5. debian/ruby-loofah4
Recent Vulnerabilities
See more →CVE-2022-23518
CVSS 6.1medium
Improper neutralization of data URIs allows XSS in rails-html-sanitizer
12/13/2022
CVE-2022-23515
CVSS 6.1medium
Improper neutralization of data URIs may allow XSS in Loofah
12/13/2022
CVE-2022-23514
CVSS 7.5high
Inefficient Regular Expression Complexity in Loofah
12/13/2022
CVE-2022-23516
CVSS 7.5high
Uncontrolled Recursion in Loofah
12/13/2022
CVE-2019-15587
CVSS 5.4medium
10/22/2019
CVE-2018-16468
CVSS 5.4medium
10/30/2018
CVE-2018-8048
CVSS 6.1medium
3/20/2018
Monitor loofah project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.