nokogiri vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-18197Highnokogiri: Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability CVE-2019-13118Highnokogiri: libxslt Type Confusion vulnerability that affects Nokogiri CVE-2019-13117Mediumnokogiri: Uninitialized read in Nokogiri gem CVE-2022-29181Highnokogiri: Nokogiri Improperly Handles Unexpected Data Type GHSA-CGX6-HPWQ-FHV5Highnokogiri: Integer Overflow or Wraparound in libxml2 affects Nokogiri CVE-2017-15412Highnokogiri: Nokogiri gem, via libxml, is affected by DoS vulnerabilities CVE-2019-11068Criticalnokogiri: Nokogiri vulnerable to libxslt protection mechanism bypass CVE-2017-16932Highnokogiri: Nokogiri gem, via libxml, is affected by DoS vulnerabilities CVE-2013-6461Mediumnokogiri: Nokogiri vulnerable to DoS while parsing XML entities CVE-2013-6460Mediumnokogiri: Nokogiri vulnerable to DoS while parsing XML documents CVE-2012-6685Highnokogiri: Nokogiri is vulnerable to XML External Entity (XXE) attack GHSA-GX8X-G87M-H5Q6Highnokogiri: Denial of Service (DoS) in Nokogiri on JRuby GHSA-XXX9-3XCR-GJJ3Mediumnokogiri: XML Injection in Xerces Java affects Nokogiri GHSA-V6GP-9MMM-C6P5Highnokogiri: Out-of-bounds Write in zlib affects Nokogiri CVE-2022-24836Highnokogiri: Nokogiri Inefficient Regular Expression Complexity CVE-2018-25032Highnokogiri: Nokogiri affected by zlib's Out-of-bounds Write vulnerability GHSA-FQ42-C5RG-92C2Highnokogiri: Vulnerable dependencies in Nokogiri CVE-2021-41098Highnokogiri: Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby GHSA-7RRM-V45F-JP64Mediumnokogiri: Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 CVE-2020-26247Mediumnokogiri: Nokogiri::XML::Schema trusts input by default, exposing risk of XXE vulnerability CVE-2020-7595Highnokogiri: libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation CVE-2019-5477Criticalnokogiri: Nokogiri Command Injection Vulnerability CVE-2018-14404Highnokogiri: Nokogiri NULL Pointer Dereference CVE-2015-7499Mediumnokogiri: Heap-based buffer overflow in nokogiri CVE-2015-8806Highnokogiri: Denial of service or RCE from libxml2 and libxslt

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.