CVE record · 1 source
CVE-2026-126069
CVSS 4.7Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.
- Vendor
- Ruby on Rails
- Product
- rails
- CVSS v3.1
- 4.7 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.
Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, the fix for CVE-2026-33168 skips blank HTML attribute names in Action View tag…