NO
Product
nokogiri
14
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 3
Watch
Add nokogiri to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57235 | 8.2 | Jun 25 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` Affected: < 1.19.4 |
| CVE-2026-57236 | 8.2 | Jun 25 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception Affected: < 1.19.4 |
| CVE-2026-79770 | 7.5 | Aug 25 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer Affected: before 1.19.3 |
| CVE-2026-57435 | 7.5 | Jun 25 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` Affected: < 1.19.4 |
| CVE-2026-57434 | 7.5 | Jun 25 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes Affected: < 1.19.4 |
Showing 5
