Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
nokogiri
|
Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value | Low Risk 3.0 | 12 hours ago | 12 hours ago |
|
nokogiri
|
Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializer | Low Risk 3.0 | 12 hours ago | 12 hours ago |
|
nokogiri
|
JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 host | Low Risk 3.7 | 12 hours ago | 12 hours ago |
|
nokogiri
|
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: Possible Use-After-Free in XInclude Processing | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | Low Risk 2.6 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | Medium Risk 6.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs | High Risk 7.8 | 1 year ago | 2 months ago |
|
nokogiri
|
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | Low Risk 3.0 | 4 months ago | 2 months ago |
|
nokogiri
|
Nokogiri XSLT transform has a memory leak | Medium Risk 5.3 | 6 months ago | 2 months ago |
|
nokogiri
|
Nokogiri CSS selector tokenizer has regular expression backtracking | High Risk 7.5 | 6 months ago | 2 months ago |
|
nokogiri
|
Nokogiri does not check the return value from xmlC14NExecute | Medium Risk 5.3 | 8 months ago | 2 months ago |
|
nokogiri
|
Nokogiri patches vendored libxml2 to resolve multiple CVEs | Critical 9.5 | 1 year ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415 | Low Risk 3.0 | 1 year ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 | Low Risk 3.0 | 1 year ago | 2 months ago |
|
nokogiri
|
Nokogiri affected by zlib's Out-of-bounds Write vulnerability | High Risk 7.5 | 4 years ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 | Medium Risk 6.0 | 5 years ago | 2 months ago |
|
nokogiri
|
Integer Overflow or Wraparound in libxml2 affects Nokogiri | High Risk 8.6 | 4 years ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs | Medium Risk 6.0 | 3 years ago | 2 months ago |
|
nokogiri
|
Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459 | Low Risk 3.0 | 2 years ago | 2 months ago |
|
nokogiri
|
Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062 | Medium Risk 6.0 | 2 years ago | 2 months ago |
|
nokogiri
|
Update bundled libxml2 to v2.10.3 to resolve multiple CVEs | Medium Risk 6.0 | 4 years ago | 2 months ago |
|
nokogiri
|
Vulnerable dependencies in Nokogiri | High Risk 8.0 | 4 years ago | 2 months ago |
|
nokogiri
|
Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby | High Risk 7.5 | 5 years ago | 4 months ago |
|
nokogiri
|
Nokogiri::XML::Schema trusts input by default, exposing risk of XXE vulnerability | Medium Risk 4.3 | 5 years ago | 4 months ago |
|
nokogiri
|
Uninitialized read in Nokogiri gem | Medium Risk 5.3 | 4 years ago | 5 months ago |
|
nokogiri
|
libxslt Type Confusion vulnerability that affects Nokogiri | High Risk 7.5 | 4 years ago | 5 months ago |
|
nokogiri
|
Nokogiri vulnerable to libxslt protection mechanism bypass | Critical 9.8 | 4 years ago | 5 months ago |
|
nokogiri
|
Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability | High Risk 7.5 | 4 years ago | 5 months ago |
|
nokogiri
|
Nokogiri NULL Pointer Dereference | High Risk 7.5 | 7 years ago | 11 months ago |
nokogiri
|
Malicious code in nokogiri (npm) | Unknown | 1 year ago | 1 year ago |
|
nokogiri
|
Nokogiri Improperly Handles Unexpected Data Type | High Risk 8.2 | 4 years ago | 1 year ago |
|
nokogiri
|
Heap-based buffer overflow in nokogiri | Medium Risk 6.0 | 8 years ago | 1 year ago |
|
nokogiri
|
Out-of-bounds Write in zlib affects Nokogiri | High Risk 7.5 | 4 years ago | 1 year ago |
|
nokogiri
|
XML Injection in Xerces Java affects Nokogiri | Medium Risk 6.5 | 4 years ago | 1 year ago |
|
nokogiri
|
Denial of Service (DoS) in Nokogiri on JRuby | High Risk 7.5 | 4 years ago | 1 year ago |
|
nokogiri
|
Nokogiri vulnerable to libxml XML Entity Expansion | Medium Risk 6.0 | 8 years ago | 1 year ago |
|
nokogiri
|
Nokogiri subject to DoS via libxml2 vulnerability | High Risk 8.0 | 8 years ago | 1 year ago |
|
nokogiri
|
Nokogiri Implements libxml2 version vulnerable to use-after-free | High Risk 8.8 | 4 years ago | 2 years ago |
|
nokogiri
|
Nokogiri contains libxml Out-of-bounds Write vulnerability | High Risk 8.6 | 4 years ago | 2 years ago |
|
nokogiri
|
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation | High Risk 7.5 | 6 years ago | 2 years ago |
|
nokogiri
|
Cross-site Scripting in loofah | Medium Risk 6.1 | 8 years ago | 2 years ago |
|
nokogiri
|
Nokogiri gem, via libxml, is affected by DoS vulnerabilities | High Risk 7.5 | 4 years ago | 2 years ago |
|
nokogiri
|
Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing | Medium Risk 5.9 | 4 years ago | 2 years ago |
|
nokogiri
|
Nokogiri Command Injection Vulnerability | Critical 9.8 | 7 years ago | 2 years ago |
|
nokogiri
|
Nokogiri vulnerable to DoS while parsing XML documents | Medium Risk 6.5 | 4 years ago | 2 years ago |
|
nokogiri
|
Nokogiri Inefficient Regular Expression Complexity | High Risk 7.5 | 4 years ago | 2 years ago |
Page 1