ruby-nokogiri vulnerabilities (Ubuntu)
17 vulnerabilities.
-
ruby-nokogiriUbuntu Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args 8.7 High -
ruby-nokogiriUbuntu Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 1.7 Low -
ruby-nokogiriUbuntu Nokogiri: Possible Use-After-Free in XInclude Processing 2.2 Low -
ruby-nokogiriUbuntu Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime 1.7 Low -
ruby-nokogiriUbuntu Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type 1.7 Low -
ruby-nokogiriUbuntu Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` 6.3 Medium -
ruby-nokogiriUbuntu Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes 1.7 Low -
ruby-nokogiriUbuntu Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 2.6 Low -
ruby-nokogiriUbuntu Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception 1.7 Low -
ruby-nokogiriUbuntu Nokogiri before 1.19.3 Memory Leak via XSLT Transform 6.9 Medium -
ruby-nokogiriUbuntu Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer 8.7 High -
ruby-nokogiriUbuntu Nokogiri before 1.19.1 Unchecked Return Value canonicalize 6.9 Medium -
ruby-nokogiriUbuntu An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with... 7.5 High -
ruby-nokogiriUbuntu Improper Handling of Unexpected Data Type in Nokogiri 8.2 High -
ruby-nokogiriUbuntu Inefficient Regular Expression Complexity in Nokogiri 7.5 High -
ruby-nokogiriUbuntu XXE in Nokogiri 2.6 Low -
ruby-nokogiriUbuntu Nokogiri Command Injection Vulnerability 9.8 Critical