nokogiri vulnerabilities (RubyGems)
57 vulnerabilities.
-
nokogiriRubyGems Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 1.7 Low -
nokogiriRubyGems Nokogiri: Possible Use-After-Free in XInclude Processing 2.2 Low -
nokogiriRubyGems Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime 1.7 Low -
nokogiriRubyGems Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type 1.7 Low -
nokogiriRubyGems Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` 6.3 Medium -
nokogiriRubyGems Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes 1.7 Low -
nokogiriRubyGems Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 2.6 Low -
nokogiriRubyGems Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception 1.7 Low -
nokogiriRubyGems Nokogiri before 1.19.3 Memory Leak via XSLT Transform 6.9 Medium -
nokogiriRubyGems Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer 8.7 High -
nokogiriRubyGems Nokogiri before 1.19.1 Unchecked Return Value canonicalize 6.9 Medium -
nokogiriRubyGems Nokogiri patches vendored libxml2 to resolve multiple CVEs No score -
nokogiriRubyGems Nokogiri before 1.18.8 packages a vulnerable version of libxml2 (before 2.13.8) that contains a... 8.7 High -
nokogiriRubyGems Nokogiri before 1.18.4 bundles a vulnerable version of libxslt (prior to 1.1.43) that contains... 8.7 High -
nokogiriRubyGems Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting... 9.3 Critical -
nokogiriRubyGems Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459 9.3 Critical -
nokogiriRubyGems Nokogiri before 1.15.6 and 1.16.x before 1.16.2 (CRuby, when using the packaged libxml2) is... 9.3 Critical -
nokogiriRubyGems Nokogiri before 1.14.3 (CRuby implementation only, when using the packaged libxml2) bundles... 8.7 High -
nokogiriRubyGems Unchecked return value from xmlTextReaderExpand in Nokogiri 7.5 High -
nokogiriRubyGems Update bundled libxml2 to v2.10.3 to resolve multiple CVEs 8.7 High -
nokogiriRubyGems Improper Handling of Unexpected Data Type in Nokogiri 8.2 High -
nokogiriRubyGems Integer Overflow or Wraparound in libxml2 affects Nokogiri 8.8 High -
nokogiriRubyGems Denial of Service (DoS) in Nokogiri on JRuby 7.5 High -
nokogiriRubyGems XML Injection in Xerces Java affects Nokogiri 6.5 Medium -
nokogiriRubyGems Out-of-bounds Write in zlib affects Nokogiri 7.5 High -
nokogiriRubyGems Inefficient Regular Expression Complexity in Nokogiri 7.5 High -
nokogiriRubyGems Nokogiri affected by zlib's Out-of-bounds Write vulnerability 7.5 High -
nokogiriRubyGems Vulnerable dependencies in Nokogiri 9.3 Critical -
nokogiriRubyGems Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby 7.5 High -
nokogiriRubyGems Nokogiri has vulnerable dependencies on libxml2 and libxslt 8.8 High -
nokogiriRubyGems Nokogiri before 1.11.4 (CRuby implementation only, when the packaged/vendored libxml2 is used)... 8.7 High -
nokogiriRubyGems Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing 5.9 Medium -
nokogiriRubyGems Nokogiri Implements libxml2 version vulnerable to use-after-free 8.8 High -
nokogiriRubyGems Nokogiri contains libxml Out-of-bounds Write vulnerability 8.6 High -
nokogiriRubyGems XXE in Nokogiri 2.6 Low -
nokogiriRubyGems libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
nokogiriRubyGems Nokogiri vulnerable to DoS while parsing XML entities 6.5 Medium -
nokogiriRubyGems Nokogiri vulnerable to DoS while parsing XML documents 6.5 Medium -
nokogiriRubyGems Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability 7.5 High -
nokogiriRubyGems Nokogiri Command Injection Vulnerability 9.8 Critical -
nokogiriRubyGems libxslt Type Confusion vulnerability that affects Nokogiri 5.3 Medium -
nokogiriRubyGems Uninitialized read in Nokogiri gem 5.3 Medium -
nokogiriRubyGems Nokogiri implementation of libxslt vulnerable to heap corruption 7.5 High -
nokogiriRubyGems Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical -
nokogiriRubyGems Nokogiri NULL Pointer Dereference 7.5 High -
nokogiriRubyGems Uncontrolled resource consumption in nokogiri 6.5 Medium -
nokogiriRubyGems Cross-site Scripting in loofah 6.1 Medium -
nokogiriRubyGems Nokogiri gem, via libxml, is affected by DoS vulnerabilities 8.8 High -
nokogiriRubyGems Nokogiri gem, via libxml, is affected by DoS vulnerabilities 7.5 High -
nokogiriRubyGems Out-of-bounds read in nokogiri 7.5 High - Show olderLoading…