What is GHSA-j3gg-r6gp-95q2?

GHSA-j3gg-r6gp-95q2 is a security advisory published by GitHub Security Advisories with Medium severity. XSS in HEEx class attributes

Why does GHSA-j3gg-r6gp-95q2 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-j3gg-r6gp-95q2?

GHSA-j3gg-r6gp-95q2 affects 1 product, including: erlang/phoenix_html:\u003c 3.0.4.

GHSA-j3gg-r6gp-95q2MediumDisclosed before NVD

XSS in HEEx class attributes

Vendor

GitHub Security Advisories

Published

April 12, 2022

Last Modified

January 11, 2023

📋 Description

The class attribute was not protected against XSS attacks when using HEEx.

🎯 Affected products1

erlang/phoenix_html:< 3.0.4

🔗 References (2)

https://github.com/phoenixframework/phoenix_html/commit/62a0139fb716bcdce697f6221244bd81d321d620
https://github.com/advisories/GHSA-j3gg-r6gp-95q2