CVE-2019-12732: Chartkick Project Chartkick

Medium severity, CVSS 4.7. EPSS: 0.8% chance of exploitation in the next 30 days.

The Chartkick gem through 3.1.0 for Ruby allows XSS.

Affected products

• Chartkick Project Chartkick: up to and including 3.1.0

Published 2019-06-06. Last modified 2026-06-17.