| Package | Affected versions | Patched versions |
|---|---|---|
| chartkick | < 3.4.0 | 3.4.0 |
| chartkick | ≤ 3.3.2 |
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free