Security: basecamp/trix
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Stored XSS via HTMLParser attribute injection on pasteGHSA-53g2-mvcc-q9x3 published
Jul 9, 2026 by flavorjonesModerate -
XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)GHSA-53p3-c7vp-4mcc published
Mar 26, 2026 by flavorjonesLow -
Stored XSS vulnerability through serialized attributesGHSA-qmpg-8xg6-ph5q published
Mar 11, 2026 by flavorjonesModerate -
Stored XSS vulnerability through attachment attributeGHSA-g9jg-w8vm-g96v published
Dec 30, 2025 by flavorjonesModerate -
XSS vulnerabilities on copy & pasteGHSA-mcrw-746g-9q8h published
May 8, 2025 by djmbModerate -
XSS via `javascript:` url in a linkGHSA-j386-3444-qgwg published
Jan 3, 2025 by intripModerate -
XSS vulnerabilities on copy & pasteGHSA-6vx4-v2jw-qwqh published
Dec 9, 2024 by djmbModerate -
XSS vulnerability on copy & pasteGHSA-qm2q-9f3q-2vcv published
Aug 14, 2024 by rosaModerate -
XSS Vulnerabilities in Trix EditorGHSA-qjqp-xr96-cj99 published
May 7, 2024 by afcapelHigh