SP
Vendor
sparklemotion
17
CVEs
0
On KEV
3
New 30D
Products
ME6.8
mechanize
sparklemotion
3 CVEs0 on KEV3 new
NO8.2
nokogiri
sparklemotion
12 CVEs0 on KEV0 new
SQ2.0
sqlite3-ruby
sparklemotion
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107715 | ME mechanize sparklemotion | 6.8 | Oct 8 | Mechanize sends credential headers to another host after an HTTP redirect |
| CVE-2026-107714 | ME mechanize sparklemotion | 5.9 | Oct 8 | Mechanize sends credential headers to a different scheme or port after a redirect |
| CVE-2026-107399 | ME mechanize sparklemotion | 6.8 | Oct 8 | Mechanize sends credential headers to another origin after a meta refresh |
| CVE-2026-79772 | NO nokogiri sparklemotion | 5.3 | Aug 25 | Nokogiri before 1.19.1 Unchecked Return Value canonicalize |
| CVE-2026-79771 | NO nokogiri sparklemotion | 5.3 | Aug 25 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform |
| CVE-2026-79770 | NO nokogiri sparklemotion | 7.5 | Aug 25 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer |
| CVE-2026-79769 | NO nokogiri sparklemotion | 5.5 | Aug 25 | Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args |
| CVE-2026-54620 | SQ sqlite3-ruby sparklemotion | 2.0 | Jul 28 | sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks |
| CVE-2026-54619 | SQ sqlite3-ruby sparklemotion | 2.0 | Jul 28 | sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity |
| CVE-2026-57438 | NO nokogiri sparklemotion | 6.6 | Jun 25 | Nokogiri: Possible Use-After-Free in XInclude Processing |
| CVE-2026-57437 | NO nokogiri sparklemotion | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime |
| CVE-2026-57436 | NO nokogiri sparklemotion | 5.3 | Jun 25 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type |
| CVE-2026-57435 | NO nokogiri sparklemotion | 7.5 | Jun 25 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` |
| CVE-2026-57434 | NO nokogiri sparklemotion | 7.5 | Jun 25 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes |
| CVE-2026-57235 | NO nokogiri sparklemotion | 8.2 | Jun 25 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` |
| CVE-2026-57234 | NO nokogiri sparklemotion | 2.6 | Jun 25 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 |
| CVE-2026-57236 | NO nokogiri sparklemotion | 8.2 | Jun 25 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception |