← Back

Chartkick Project

chartkick_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Chartkick
chartkick
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-16254
1Chartkick Project
1Chartkick
Jun 17, 2026
Aug 5, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
CVE-2019-12732
1Chartkick Project
1Chartkick
Jun 17, 2026
Jun 6, 2019
N/A· v4
4.7 MEDIUM· v3
2.6 LOW· v2
The Chartkick gem through 3.1.0 for Ruby allows XSS.