secure_headers vulnerabilities

CVEs whose affected-version data names the secure_headers package (rubygems). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54163Medium· 4.7

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

▾ Sunlitsecure_headers · secure_headersEPSS 0.29%via GHSA

secure_headers vulnerabilities (CVEs) · VulnSea