CVE-2019-15587

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Date published : 2019-10-22

https://github.com/flavorjones/loofah/issues/171

https://security.netapp.com/advisory/ntap-20191122-0003/