NO
Product
Nokogiri
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 8Low 1
Watch
Add Nokogiri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57235 | 8.2 | Jun 25 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` Affected: before 1.19.4 |
| CVE-2026-57236 | 8.2 | Jun 25 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception Affected: before 1.19.4 |
| CVE-2022-29181 | 8.2 | May 20 | Nokogiri is an open source XML and HTML library for Ruby Affected: before 1.13.6 |
| CVE-2026-79770 | 7.5 | Aug 25 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer Affected: before 1.19.3 |
| CVE-2026-57435 | 7.5 | Jun 25 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` Affected: before 1.19.4 |
| CVE-2026-57434 | 7.5 | Jun 25 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes Affected: before 1.19.4 |
| CVE-2022-23476 | 7.5 | Dec 8 | Nokogiri is an open source XML and HTML library for the Ruby programming language Affected: 1.13.8; 1.13.9 |
| CVE-2022-24836 | 7.5 | Apr 11 | Nokogiri is an open source XML and HTML library for Ruby Affected: before 1.13.4 |
| CVE-2018-25032 | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches Affected: before 1.13.4 |
| CVE-2021-41098 | 7.5 | Sep 27 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support Affected: before 1.12.5 |
| CVE-2012-6685 | 7.5 | Feb 19 | Nokogiri before 1.5.4 is vulnerable to XXE attacks Affected: before 1.5.4 |
Showing 11