NO
Product
Nokogiri
by Nokogiri · last CVE Aug 25, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 8Low 1
Watch

Add Nokogiri to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-5477
9.8
6%
Aug 16
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method
Affected: through 1.10.3
Showing 1