NO
Product
nokogiri
12
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 1
Watch
Add nokogiri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57235 | 8.2 | Jun 25 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` Affected: < 1.19.4 |
| CVE-2026-57236 | 8.2 | Jun 25 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception Affected: < 1.19.4 |
| CVE-2026-79770 | 7.5 | Aug 25 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer Affected: before 1.19.3 |
| CVE-2026-57435 | 7.5 | Jun 25 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` Affected: < 1.19.4 |
| CVE-2026-57434 | 7.5 | Jun 25 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes Affected: < 1.19.4 |
| CVE-2026-57438 | 6.6 | Jun 25 | Nokogiri: Possible Use-After-Free in XInclude Processing Affected: < 1.19.4 |
| CVE-2026-79769 | 5.5 | Aug 25 | Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args Affected: before 1.19.4 |
| CVE-2026-79772 | 5.3 | Aug 25 | Nokogiri before 1.19.1 Unchecked Return Value canonicalize Affected: 1.5.1 before 1.19.1 |
| CVE-2026-79771 | 5.3 | Aug 25 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform Affected: before 1.19.3 |
| CVE-2026-57437 | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime Affected: < 1.19.4 |
| CVE-2026-57436 | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type Affected: < 1.19.4 |
| CVE-2026-57234 | 2.6 | Jun 25 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 Affected: < 1.19.4 |
Showing 12