NO
Vendor
Nokogiri
21
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-79772 | NO Nokogiri Nokogiri | 5.3 | Aug 25 | Nokogiri before 1.19.1 Unchecked Return Value canonicalize |
| CVE-2026-79771 | NO Nokogiri Nokogiri | 5.3 | Aug 25 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform |
| CVE-2026-79770 | NO Nokogiri Nokogiri | 7.5 | Aug 25 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer |
| CVE-2026-57438 | NO Nokogiri Nokogiri | 6.6 | Jun 25 | Nokogiri: Possible Use-After-Free in XInclude Processing |
| CVE-2026-57437 | NO Nokogiri Nokogiri | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime |
| CVE-2026-57436 | NO Nokogiri Nokogiri | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type |
| CVE-2026-57435 | NO Nokogiri Nokogiri | 7.5 | Jun 25 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` |
| CVE-2026-57434 | NO Nokogiri Nokogiri | 7.5 | Jun 25 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes |
| CVE-2026-57235 | NO Nokogiri Nokogiri | 8.2 | Jun 25 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` |
| CVE-2026-57234 | NO Nokogiri Nokogiri | 2.6 | Jun 25 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 |
| CVE-2026-57236 | NO Nokogiri Nokogiri | 8.2 | Jun 25 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception |
| CVE-2022-23476 | NO Nokogiri Nokogiri | 7.5 | Dec 8 | Nokogiri is an open source XML and HTML library for the Ruby programming language |
| CVE-2022-29181 | NO Nokogiri Nokogiri | 8.2 | May 20 | Nokogiri is an open source XML and HTML library for Ruby |
| CVE-2022-24836 | NO Nokogiri Nokogiri | 7.5 | Apr 11 | Nokogiri is an open source XML and HTML library for Ruby |
| CVE-2018-25032 | NO Nokogiri Nokogiri | 7.5 | Mar 25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches |
| CVE-2021-41098 | NO Nokogiri Nokogiri | 7.5 | Sep 27 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support |
| CVE-2020-26247 | NO Nokogiri Nokogiri | 4.3 | Dec 30 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support |
| CVE-2012-6685 | NO Nokogiri Nokogiri | 7.5 | Feb 19 | Nokogiri before 1.5.4 is vulnerable to XXE attacks |
| CVE-2013-6461 | NO Nokogiri Nokogiri | 6.5 | Nov 5 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits |
| CVE-2013-6460 | NO Nokogiri Nokogiri | 6.5 | Nov 5 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents |
| CVE-2019-5477 | NO Nokogiri Nokogiri | 9.8 | Aug 16 | A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method |