system
Describe <CVE-2018-3740>.
user
What is <CVE-2018-3740>?
assistant
A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element..