Junglewise Threat Intelligence

CVE-2026-73648: Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

CVE-2026-73648 · Severity: medium · CVSS 4 · Published 2026-07-21

Technologies: rails-html-sanitizer (RubyGems). Vendors: RubyGems.

Executive brief

Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

Affected products

  • RubyGems rails-html-sanitizer

Related threats