CVE-2022-27777: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

Affected products

• Debian Debian Linux: version 10.0 only
• Rubyonrails Actionpack: before 5.2.7.1 (fixed in 5.2.7.1); from 6.0.0, before 6.0.4.8 (fixed in 6.0.4.8); from 6.1.0, before 6.1.5.1 (fixed in 6.1.5.1); from 7.0.0, before 7.0.2.4 (fixed in 7.0.2.4)

Published 2022-05-26. Last modified 2026-06-17.