https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 12:44:46 +0000 https://db.gcve.eu/vuln/cve-2026-126078 <p><strong>Affected:</strong> rails</p> <p>Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, ActionView::Helpers::TextHelper#highlight substitutes each matched phrase into the :highlighter string without escaping it and returns the result marked HTML-safe. Because sanitizing leaves quote characters in text unescaped, a match substituted into a quoted attribute value of the highlighter, such as the &lt;a href=&#34;search?q=\1&#34;&gt; form shown in the method&#39;s documentation, could end the attribute value and add attributes to the element, possibly leading to XSS. Applications are affected when they pass a :highlighter that places a placeholder inside an attribute value and highlight text or phrases that a user controls. The default &lt;mark&gt;\1&lt;/mark&gt; highlighter and the block form are not affected. This issue is fixed in versions 8.1.4.1 and 8.0.5.2.</p> <p><strong>Affected:</strong> rails</p> <p>Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior to 8.1.4.1 and 8.0.5.2, ActionView::Helpers::TextHelper#highlight substitutes each matched phrase into the :highlighter string without escaping it and returns the result marked HTML-safe. Because sanitizing leaves quote characters in text unescaped, a match substituted into a quoted attribute value of the highlighter, such as the &lt;a href=&#34;search?q=\1&#34;&gt; form shown in the method&#39;s documentation, could end the attribute value and add attributes to the element, possibly leading to XSS. Applications are affected when they pass a :highlighter that places a placeholder inside an attribute value and highlight text or phrases that a user controls. The default &lt;mark&gt;\1&lt;/mark&gt; highlighter and the block form are not affected. This issue is fixed in versions 8.1.4.1 and 8.0.5.2.</p> https://db.gcve.eu/vuln/cve-2026-126078