chartkick
Create beautiful JavaScript charts with one line of Ruby
View on Github
Activity
- Latest release
- 11mo ago
- Total releases
- 86
- Cadence
- ~2 months
- Last 12 months
- 1
Reach
- Stars
- —
Details
- License
- MIT
- First release
- May 07, 2013
| Version | Released | |
|---|---|---|
5.2.1
patch
| ||
5.2.0
minor
| ||
5.1.5
patch
| ||
5.1.4
patch
| ||
5.1.3
patch
| ||
5.1.2
patch
| ||
5.1.1
patch
| ||
5.1.0
minor
| ||
5.0.7
patch
| ||
5.0.6
patch
| ||
5.0.5
patch
| ||
5.0.4
patch
| ||
5.0.3
patch
| ||
5.0.2
patch
| ||
5.0.1
patch
| ||
5.0.0
major
| ||
4.2.1
patch
| ||
4.2.0
minor
| ||
4.1.3
patch
| ||
4.1.1
patch
| ||
4.1.2
patch
| ||
4.1.0
minor
| ||
4.0.5
patch
| ||
4.0.4
patch
| ||
4.0.3
patch
| ||
4.0.2
patch
| ||
4.0.1
patch
| ||
4.0.0
major
| ||
3.4.2
patch
| ||
3.4.1
patch
| ||
3.4.0
minor
| ||
3.3.2
patch
1 CVE
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev | ||
3.3.1
patch
1 CVE
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev | ||
3.3.0
minor
1 CVE
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev | ||
3.2.2
patch
2 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev | ||
3.2.1
patch
2 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev | ||
3.2.0
minor
2 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev | ||
3.1.0
minor
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
3.0.2
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
3.0.1
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
3.0.0
major
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.5
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.4
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.3
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.2
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.1
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.3.0
minor
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.2.5
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.2.4
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
2.2.3
patch
3 CVEs
CVE-2020-16254
GHSA-3j95-fjv2-3m4p
Aug 12, 2020
CSS Injection in Chartkick gem
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 43 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
Fixed in
3.4.0
References
Updated Nov 08, 2023 · Source: OSV.dev
CVE-2019-18841
GHSA-5pm8-492c-92p5
Dec 02, 2019
Prototype Pollution in chartkick
7.3
/ 10
High
Network
Low
None
None
Unchanged
Low
Low
Low
Affected versions of RecommendationUpgrade to version 3.2.0 or later. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 40 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
3.2.0
3.2.1
3.2.2
Fixed in
3.3.0
References
Updated Dec 04, 2024 · Source: OSV.dev
CVE-2019-12732
GHSA-g45g-g52h-39rg
Jun 07, 2019
Cross-site Scripting in Chartkick
4.7
/ 10
Medium
Network
High
None
Required
Changed
Low
Low
None
The Chartkick gem through 3.1.0 for Ruby allows XSS. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.1.3
1.2.0
+ 37 more Show less
1.2.1
1.2.2
1.2.3
1.2.4
1.2.5
1.3.0
1.3.1
1.3.2
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
2.0.0
2.0.1
2.0.2
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.3.5
3.0.0
3.0.1
3.0.2
3.1.0
Fixed in
3.2.0
References Updated Nov 08, 2023 · Source: OSV.dev |