Skip to content

CVE record · 1 source

CVE-2026-126070

CVSS 6.1

Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 6.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 6h ago

Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML.

Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, strip_tags in Action View returns its sanitized output marked html_safe, but…

CVSS 6.1 Fix available CVE-2026-126070 Ruby on Rails