A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method

Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Nokogiri is an open source XML and HTML library for Ruby

Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Nokogiri is an open source XML and HTML library for the Ruby programming language

Nokogiri is an open source XML and HTML library for Ruby

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches

Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support

Nokogiri before 1.5.4 is vulnerable to XXE attacks

Nokogiri: Possible Use-After-Free in XInclude Processing

Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

Nokogiri before 1.19.1 Unchecked Return Value canonicalize

Nokogiri before 1.19.3 Memory Leak via XSLT Transform

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support

Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247