grape subject to Cross-site Scripting

MEDIO 6.1CVE-2018-3769 · GHSA-f599-5m7p-hcpf · Published 05/07/2018 · updated 17/06/2026

In breve

CVE-2018-3769 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda grape, grape (ruby-grape).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 73.1% delle vulnerabilità.
Correzione: aggiornare a 1.1.0 o successiva.

Package	Affected versions	Patched versions
grape RubyGems	`< 1.1.0`	`1.1.0`
grape ruby-grape	`≤ 1.0.3`	No fix yet

The grape rubygem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

NVD description

ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.