pkg:RubyGems/nokogiri

All known vulnerabilities

• CRITICAL9.8CVE-2019-11068libxslt - security update
  from 0, < 1.10.3
• CRITICAL9.8CVE-2019-5477rexical - security update
  from 0, < 1.10.4
• CRITICAL9.8CVE-2016-4658libxml2 - security update
  from 0, < 1.7.1
• HIGH8.8libxslt - security update
  from 0, < 1.13.2
• HIGH8.8Nokogiri Implements libxml2 version vulnerable to use-after-free
  from 0, < 1.11.4
• HIGH8.8libxml2 - security update
  from 0, < 1.8.2
• HIGH8.8chromium-browser - security update
  from 0, < 1.7.2
• HIGH8.6Nokogiri contains libxml Out-of-bounds Write vulnerability
  from 0, < 1.11.4
• HIGH8.2Nokogiri Improperly Handles Unexpected Data Type
  from 0, < 1.13.6
• HIGH7.5Unchecked return value from xmlTextReaderExpand
  >= 1.13.8, < 1.13.10
• HIGH7.5libxslt - security update
  from 0, < 1.10.5
• HIGH7.5libxslt - security update
  from 0, < 1.10.5
• HIGH7.5libxslt Type Confusion vulnerability that affects Nokogiri
  from 0, < 1.10.5
• HIGH7.5Nokogiri gem, via libxml, is affected by DoS vulnerabilities
  from 0, < 1.8.1
• HIGH7.5libnokogiri-ruby - security update
  from 0, < 1.5.4
• HIGH7.5ruby-nokogiri - security update
  from 0, < 1.13.4
• HIGH7.5Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
  from 0, < 1.12.5
• HIGH7.5libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
  from 0, < 1.10.8
• HIGH7.5Nokogiri NULL Pointer Dereference
  from 0, < 1.8.5
• HIGH7.5libxml2 - security update
  >= 1.6.0, < 1.6.8
• HIGH7.5Out-of-bounds read in nokogiri
  from 0, < 1.8.1
• MEDIUM6.6Nokogiri: Possible Use-After-Free in XInclude Processing
  from 0, < 1.19.4
• MEDIUM6.5Nokogiri vulnerable to DoS while parsing XML documents
  >= 1.5.0, < 1.5.11
• MEDIUM6.5Nokogiri vulnerable to DoS while parsing XML entities
  >= 1.5.0, < 1.5.11
• MEDIUM6.5libxml2 - security update
  from 0, < 1.8.2
• MEDIUM6.1ruby-loofah - security update
  from 0, < 1.8.3
• MEDIUM5.9Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
  from 0, < 1.11.4
• MEDIUM5.3Uninitialized read in Nokogiri gem
  from 0, < 1.10.5
• MEDIUM4.3ruby-nokogiri - security update
  from 0, < 1.11.0
• —Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime
  from 0, < 1.19.4
• —Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type
  from 0, < 1.19.4
• —Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
  from 0, < 1.19.4
• —Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
  from 0, < 1.19.4
• —Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception
  from 0, < 1.19.4
• —Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
  from 0, < 1.19.4
• —Heap-based buffer overflow in nokogiri
  >= 1.6.0, < 1.6.7.2
• —libxml2 - security update
  >= 1.6.0, < 1.6.7.1
• —libxml2 - security update
  >= 1.6.6.0, < 1.6.6.4