ruby-nokogiri vulnerabilities (Alpaquita)
13 vulnerabilities.
ruby-nokogiriAlpaquitaNokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args8.7 Highruby-nokogiriAlpaquitaNokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`1.7 Lowruby-nokogiriAlpaquitaNokogiri: Possible Use-After-Free in XInclude Processing2.2 Lowruby-nokogiriAlpaquitaNokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime1.7 Lowruby-nokogiriAlpaquitaNokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type1.7 Lowruby-nokogiriAlpaquitaNokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`6.3 Mediumruby-nokogiriAlpaquitaNokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes1.7 Lowruby-nokogiriAlpaquitaNokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-262472.6 Lowruby-nokogiriAlpaquitaNokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception1.7 Lowruby-nokogiriAlpaquitaNokogiri before 1.19.3 Memory Leak via XSLT Transform6.9 Mediumruby-nokogiriAlpaquitaNokogiri before 1.19.3 ReDoS via CSS selector tokenizer8.7 Highruby-nokogiriAlpaquitaNokogiri before 1.19.1 Unchecked Return Value canonicalize6.9 Mediumruby-nokogiriAlpaquitaNokogiri before 1.14.3 (CRuby implementation only, when using the packaged libxml2) bundles...8.7 High