Executive brief
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
Affected products
- RubyGems rails-html-sanitizer
Junglewise Threat Intelligence
CVE-2026-73648 · Severity: medium · CVSS 4 · Published 2026-07-21
Technologies: rails-html-sanitizer (RubyGems). Vendors: RubyGems.
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations