Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-phwj-rprq-35pp
  • RubyGems/nokogiri
 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 19 Jun
  • Fix available
  • Severity - 1.7 (Low)
GHSA-wfpw-mmfh-qq69
  • RubyGems/nokogiri
 Nokogiri: Possible Use-After-Free in XInclude Processing 19 Jun
  • Fix available
GHSA-p67v-3w7g-wjg7
  • RubyGems/nokogiri
 Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime 19 Jun
  • Fix available
  • Severity - 1.7 (Low)
GHSA-wjv4-x9w8-wm3h
  • RubyGems/nokogiri
 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type 19 Jun
  • Fix available
  • Severity - 1.7 (Low)
GHSA-5prr-v3j2-97mh
  • RubyGems/nokogiri
 Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` 19 Jun
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-9cv2-cfxc-v4v2
  • RubyGems/nokogiri
 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes 19 Jun
  • Fix available
  • Severity - 1.7 (Low)
GHSA-8678-w3jw-xfc2
  • RubyGems/nokogiri
 Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 19 Jun
  • Fix available
  • Severity - 2.6 (Low)
GHSA-5v8h-3h3q-446p
  • RubyGems/nokogiri
 Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception 19 Jun
  • Fix available
  • Severity - 1.7 (Low)
GHSA-v2fc-qm4h-8hqv
  • RubyGems/nokogiri
 Nokogiri XSLT transform has a memory leak 06 May
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-c4rq-3m3g-8wgx
  • RubyGems/nokogiri
 Nokogiri CSS selector tokenizer has regular expression backtracking 06 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-wx95-c6cv-8532
  • RubyGems/nokogiri
 Nokogiri does not check the return value from xmlC14NExecute 18 Feb
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-353f-x4gh-cqq8
  • RubyGems/nokogiri
 Nokogiri patches vendored libxml2 to resolve multiple CVEs 21 Jul 2025
  • Fix available
GHSA-5w6v-399v-w3cc
  • RubyGems/nokogiri
 Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415 21 Apr 2025
  • Fix available
GHSA-mrxw-mxhj-p664
  • RubyGems/nokogiri
 Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs 14 Mar 2025
  • Fix available
  • Severity - 7.8 (High)
GHSA-vvfq-8hwr-qm4m
  • RubyGems/nokogiri
 Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 18 Feb 2025
  • Fix available
GHSA-r95h-9x8f-r3f7
  • RubyGems/nokogiri
 Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459 13 May 2024
  • Fix available
Load more...