NO
Product
Nokogiri
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 8Low 1
Watch
Add Nokogiri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57438 | 6.6 | Jun 25 | Nokogiri: Possible Use-After-Free in XInclude Processing Affected: before 1.19.4 |
| CVE-2013-6461 | 6.5 | Nov 5 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits Affected: 1.5.0 before 1.5.11; 1.6.0 before 1.6.1 |
| CVE-2013-6460 | 6.5 | Nov 5 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents Affected: 1.5.0 before 1.5.11; 1.6.0 before 1.6.1 |
| CVE-2026-79772 | 5.3 | Aug 25 | Nokogiri before 1.19.1 Unchecked Return Value canonicalize Affected: 1.5.1 before 1.19.1 |
| CVE-2026-79771 | 5.3 | Aug 25 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform Affected: before 1.19.3 |
| CVE-2026-57437 | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime Affected: before 1.19.4 |
| CVE-2026-57436 | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type Affected: before 1.19.4 |
| CVE-2020-26247 | 4.3 | Dec 30 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support Affected: before 1.11.0; 1.11.0; 1.11.0; 1.11.0 |
Showing 8