| Version | Supported |
|---|---|
| 3.x | ✅ |
| < 3.0 | ❌ |
Please don't report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Please report the issue to us directly using private vulnerability reporting.
Repository navigation
Security: ViewComponent/view_component
Security
SECURITY.md
-
ViewComponent: Incomplete fix for CVE-2026-54497 — slot and with_content state still leak across reused component instancesGHSA-8qw7-6phv-7q6p published
Aug 28, 2026 by joelhawksleyModerate -
Reused Component Instances Retain Stale Render ContextGHSA-9h85-g7w3-rh49 published
Jun 4, 2026 by joelhawksleyModerate -
around_render HTML-Safety BypassGHSA-97jw-64cj-jc58 published
Jun 4, 2026 by joelhawksleyHigh -
System Test Entry Point Path Check Allows Sibling Directory EscapeGHSA-hg3h-g7xc-f7vp published
May 5, 2026 by joelhawksleyModerate -
Preview Route Can Dispatch Inherited Helper MethodsGHSA-7f3r-gwc9-2995 published
May 5, 2026 by joelhawksleyModerate -
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_componentGHSA-wf2x-8w6j-qw37 published
Jan 4, 2024 by camertronLow -
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_componentGHSA-cm9w-c4rj-r2cf published
Mar 2, 2022 by camertronHigh
Learn more about advisories related to ViewComponent/view_component in the GitHub Advisory Database