ruby3.2-rubygem-nokogiri vulnerabilities (openSUSE)
44 vulnerabilities.
-
ruby3.2-rubygem-nokogiriopenSUSE An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted... 6.5 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Unchecked return value from xmlTextReaderExpand in Nokogiri 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Improper Handling of Unexpected Data Type in Nokogiri 8.2 High -
ruby3.2-rubygem-nokogiriopenSUSE In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ... 6.5 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Inefficient Regular Expression Complexity in Nokogiri 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri affected by zlib's Out-of-bounds Write vulnerability 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Infinite loop within Apache XercesJ xml parser 6.5 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri has vulnerable dependencies on libxml2 and libxslt 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all... 6.5 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing 5.9 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri Implements libxml2 version vulnerable to use-after-free 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri contains libxml Out-of-bounds Write vulnerability 8.6 High -
ruby3.2-rubygem-nokogiriopenSUSE There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit... 7.8 High -
ruby3.2-rubygem-nokogiriopenSUSE GNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in... 6.5 Medium -
ruby3.2-rubygem-nokogiriopenSUSE libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri Command Injection Vulnerability 9.8 Critical -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri vulnerable to libxslt protection mechanism bypass 9.8 Critical -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri NULL Pointer Dereference 7.5 High -
ruby3.2-rubygem-nokogiriopenSUSE Cross-site Scripting in loofah 6.1 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri gem, via libxml, is affected by DoS vulnerabilities 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri implementation of libxslt lacks integer overflow checks 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows... 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri does not forbid namespace nodes in XPointer ranges 9.8 Critical -
ruby3.2-rubygem-nokogiriopenSUSE Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743... 8.8 High -
ruby3.2-rubygem-nokogiriopenSUSE The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers... 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Heap-based buffer overflow in nokogiri 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3... 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9... 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri subject to DoS via libxml2 vulnerability 7.1 High -
ruby3.2-rubygem-nokogiriopenSUSE The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent... 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before... 5.8 Medium -
ruby3.2-rubygem-nokogiriopenSUSE The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context... 6.4 Medium -
ruby3.2-rubygem-nokogiriopenSUSE The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node... 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,... 2.6 Low -
ruby3.2-rubygem-nokogiriopenSUSE The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip... 6.8 Medium -
ruby3.2-rubygem-nokogiriopenSUSE libxml2 2.9.2 does not properly stop parsing invalid input, which allows context-dependent... 4.3 Medium -
ruby3.2-rubygem-nokogiriopenSUSE Nokogiri vulnerable to libxml XML Entity Expansion 5.0 Medium -
ruby3.2-rubygem-nokogiriopenSUSE The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web... 4.3 Medium -
ruby3.2-rubygem-nokogiriopenSUSE parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products... 5.0 Medium