{"id":"CVE-2022-23476","aliases":["ALPINE-CVE-2022-23476","BELL-CVE-2022-23476","DEBIAN-CVE-2022-23476","EUVD-2022-7725","GHSA-qv4q-mr5r-qprj","UBUNTU-CVE-2022-23476","openSUSE-SU-2024:13440-1","openSUSE-SU-2024:14174-1","openSUSE-SU-2025:14697-1","openSUSE-SU-2026:10356-1"],"status":"published","title":"Unchecked return value from xmlTextReaderExpand in Nokogiri","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01823,"percentile":0.79096,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-252","CWE-476"],"published":"2022-12-08T03:03:24Z","modified":"2026-11-03T08:03:49Z","fixes":[{"ecosystem":"RubyGems","package":"nokogiri","fixed_in":["1.13.10"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.16","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ruby-nokogiri","fixed_in":["1.13.10-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ruby-nokogiri","fixed_in":["1.13.10+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby-nokogiri","fixed_in":["1.13.10+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby-nokogiri","fixed_in":["1.13.10+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.8"},{"fixed":"1.13.10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.10+dfsg-1"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.8"},{"fixed":"1.13.10"}]}],"versions":["1.13.8","1.13.9"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.4-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1.5"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-1.1"}]}],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.9-1.4"}]}],"bundled":44}],"products":[{"vendor":"nokogiri","product":"nokogiri"},{"vendor":"sparklemotion","product":"nokogiri"}],"references":[{"url":"https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-qv4q-mr5r-qprj","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/sparklemotion/nokogiri/commit/85410e38410f670cbbc8c5b00d07b843caee88ce","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://github.com/sparklemotion/nokogiri/commit/9fe0761c47c0d4270d1a5220cfd25de080350d50","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23476","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2022-23476.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qv4q-mr5r-qprj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-23476","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-23476","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23476.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23476","tags":["advisory"]},{"url":"https://github.com/sparklemotion/nokogiri","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2022-23476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23476","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-29469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20388","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29824","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U5YNW74OL2W7SH2XTAVN5TODNFIVFL3Y/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-23476","title":"Unchecked return value from xmlTextReaderExpand in Nokogiri","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T03:03:24.572Z","modified":"2025-04-23T16:31:18.189Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-252","CWE-476"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-7725","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T03:03:24Z","modified":"2025-04-23T16:31:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:12.313971Z"}],"ghsa":[{"id":"GHSA-qv4q-mr5r-qprj","title":"Unchecked return value from xmlTextReaderExpand","description":"## Summary\n\nNokogiri `1.13.8, 1.13.9` fails to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. \n\nFor applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack.\n\n\n## Mitigation\n\nUpgrade to Nokogiri `\u003e= 1.13.10`.\n\nUsers may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.\n\n\n## Severity\n\nThe Nokogiri maintainers have evaluated this as [High Severity 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).\n\n\n## References\n\n- [CWE - CWE-252: Unchecked Return Value (4.9)](https://cwe.mitre.org/data/definitions/252.html)\n- [CWE - CWE-476: NULL Pointer Dereference (4.9)](https://cwe.mitre.org/data/definitions/476.html)\n\n\n## Credit\n\nThis vulnerability was responsibly reported by @davidwilemski.\n","status":"published","published":"2022-12-08T03:03:33Z","modified":"2023-02-02T05:02:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-252","CWE-476"],"updated_at":"2026-11-02T14:36:40.500292Z"}],"nvd":[{"id":"CVE-2022-23476","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T04:15:09.043Z","modified":"2026-06-17T04:30:12.077Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-252","CWE-476"],"updated_at":"2026-11-02T14:07:33.239526Z"}],"osv":[{"id":"ALPINE-CVE-2022-23476","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T04:15:09.043Z","modified":"2026-11-03T07:30:18.805526111Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"BELL-CVE-2022-23476","title":"CVE-2022-23476 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:40.192969Z","modified":"2026-01-26T09:50:05.812353Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-23476","title":"Unchecked return value from xmlTextReaderExpand in Nokogiri","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T03:03:24.572Z","modified":"2026-11-11T13:22:14.683590894Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-252","CWE-476"],"updated_at":"2026-11-11T02:50:43.46164Z"},{"id":"DEBIAN-CVE-2022-23476","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"published","published":"2022-12-08T04:15:09.043Z","modified":"2026-11-03T08:03:49.881520062Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"GHSA-qv4q-mr5r-qprj","title":"Unchecked return value from xmlTextReaderExpand","description":"## Summary\n\nNokogiri `1.13.8, 1.13.9` fails to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. \n\nFor applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack.\n\n\n## Mitigation\n\nUpgrade to Nokogiri `\u003e= 1.13.10`.\n\nUsers may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.\n\n\n## Severity\n\nThe Nokogiri maintainers have evaluated this as [High Severity 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).\n\n\n## References\n\n- [CWE - CWE-252: Unchecked Return Value (4.9)](https://cwe.mitre.org/data/definitions/252.html)\n- [CWE - CWE-476: NULL Pointer Dereference (4.9)](https://cwe.mitre.org/data/definitions/476.html)\n\n\n## Credit\n\nThis vulnerability was responsibly reported by @davidwilemski.\n","status":"published","published":"2022-12-08T03:03:33Z","modified":"2023-11-08T04:08:18.808326Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-252","CWE-476"],"updated_at":"2026-11-02T15:46:55.122811Z"},{"id":"UBUNTU-CVE-2022-23476","description":"Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead to a null pointer exception when invalid markup is being parsed. For applications using `XML::Reader` to parse untrusted inputs, this may potentially be a vector for a denial of service attack. Users are advised to upgrade to Nokogiri `\u003e= 1.13.10`. Users may be able to search their code for calls to either `XML::Reader#attributes` or `XML::Reader#attribute_hash` to determine if they are affected.","status":"withdrawn","published":"2022-12-08T04:15:00Z","modified":"2025-07-18T16:49:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"openSUSE-SU-2024:13440-1","title":"ruby3.2-rubygem-nokogiri-1.15.4-1.1 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.15.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:53:25.340025Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:14174-1","title":"ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T03:03:19.688417Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2025:14697-1","title":"ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media","description":"These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-25T00:00:00Z","modified":"2026-02-04T03:50:12.082525Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2026:10356-1","title":"ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media","description":"These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-13T00:00:00Z","modified":"2026-03-14T08:44:10.568806Z","updated_at":"2026-11-02T16:58:38.415593Z"}]}}