ruby-nokogiri vulnerabilities (Debian)
18 vulnerabilities.
-
ruby-nokogiriDebian Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args 8.7 High -
ruby-nokogiriDebian Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 1.7 Low -
ruby-nokogiriDebian Nokogiri: Possible Use-After-Free in XInclude Processing 2.2 Low -
ruby-nokogiriDebian Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime 1.7 Low -
ruby-nokogiriDebian Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type 1.7 Low -
ruby-nokogiriDebian Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` 6.3 Medium -
ruby-nokogiriDebian Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes 1.7 Low -
ruby-nokogiriDebian Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 2.6 Low -
ruby-nokogiriDebian Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception 1.7 Low -
ruby-nokogiriDebian Nokogiri before 1.19.3 Memory Leak via XSLT Transform 6.9 Medium -
ruby-nokogiriDebian Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer 8.7 High -
ruby-nokogiriDebian Nokogiri before 1.19.1 Unchecked Return Value canonicalize 6.9 Medium -
ruby-nokogiriDebian Unchecked return value from xmlTextReaderExpand in Nokogiri 7.5 High -
ruby-nokogiriDebian Improper Handling of Unexpected Data Type in Nokogiri 8.2 High -
ruby-nokogiriDebian Inefficient Regular Expression Complexity in Nokogiri 7.5 High -
ruby-nokogiriDebian XXE in Nokogiri 2.6 Low -
ruby-nokogiriDebian Nokogiri Command Injection Vulnerability 9.8 Critical -
ruby-nokogiriDebian Nokogiri is vulnerable to XML External Entity (XXE) attack 7.5 High