CVE-2026-128068

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 through 1.7.1, Rails::HTML::PermitScrubber checks SVG href and xlink:href local references with a pattern whose line-start anchor and whitespace class cause an all-whitespace value to be rescanned from each line start. An attacker who supplies HTML can cause quadratic CPU consumption when an application customizes its allowed tags to include an SVG reference element such as use and permits href or xlink:href. The default allowed tag configuration is not affected. CRuby 3.2 and later uses linear-time regular expression matching for this pattern, while CRuby 3.1 and earlier and JRuby are affected. This issue is fixed in version 1.7.2.

• CWE-400
• CWE-1333

• https://github.com/rails/rails-html-sanitizer/commit/f776f963b9d9346271aade9cb903e793fd38e865
• https://github.com/rails/rails-html-sanitizer/releases/tag/v1.7.2
• https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-cpgf-5mjf-73p7

Published

Nov 13, 2026

Last Modified

Nov 13, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-128052OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before …2.7
• CVE-2026-128053OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before …4.7
• CVE-2026-12806A vulnerability has been found in Edimax BR-6478AC V2 1.23. …8.8
• CVE-2026-128065@grpc/grpc-js implements the core functionality of gRPC pure…6.9
• CVE-2026-128066Pillow is a Python imaging library. From 1.0 through 12.3.0,…8.7
• CVE-2026-128067Pillow is a Python imaging library. From 2.3.0 through 12.3.…8.4
• CVE-2026-128069rails-html-sanitizer is responsible for sanitizing HTML frag…4.7
• CVE-2026-12807A vulnerability was found in Edimax BR-6478AC V2 1.23. This …6.3
• CVE-2026-128070Nuxt is an open-source web development framework for Vue.js.…5.9
• CVE-2026-128071Nuxt is an open-source web development framework for Vue.js.…6.5
• CVE-2026-128072Nuxt is an open-source web development framework for Vue.js.…3.1
• CVE-2026-128074Nuxt is an open-source web development framework for Vue.js.…6.9