← Back

Chartkick

chartkick

Vendor: Chartkick Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-16254
1Chartkick Project
1Chartkick
Jun 17, 2026
Aug 5, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
CVE-2019-12732
1Chartkick Project
1Chartkick
Jun 17, 2026
Jun 6, 2019
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
The Chartkick gem through 3.1.0 for Ruby allows XSS.