Browse CVEs

MEDIUM 6.6 CVE-2026-57438 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML:… Nokogiri 1.19.4+ Fix from $1,6002026-06-25 HIGH 7.5 CVE-2026-57435 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a R… Nokogiri 1.19.4+ Fix from $1,9502026-06-25 MEDIUM 5.3 CVE-2026-57436 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Document#root= validated only that… Nokogiri 1.19.4+ Fix from $1,6002026-06-25 MEDIUM 5.3 CVE-2026-57437 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its sour… Nokogiri 1.19.4+ Fix from $1,6002026-06-25 HIGH 8.2 CVE-2026-57235 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::NodeSet#[] (and its alias #slice) … Nokogiri 1.19.4+ Fix from $1,9502026-06-25 HIGH 8.2 CVE-2026-57236 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, calling Document#encoding= with an invalid encodi… Nokogiri 1.19.4+ Fix from $1,9502026-06-25 HIGH 7.5 CVE-2026-57434 Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain meth… Nokogiri 1.19.4+ Fix from $1,9502026-06-25 HIGH 7.5 CVE-2022-23476 Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from… Nokogiri Patch available Fix from $1,9502022-12-08 HIGH 8.2 CVE-2022-29181 Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX … Nokogiri 1.13.6 / 13.1+ Fix from $1,9502022-05-20 HIGH 7.5 CVE-2022-24836 Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to exce… Nokogiri 1.13.4 / 13.1+ Fix from $1,9502022-04-11 HIGH 7.5 CVE-2018-25032EPSS 52% zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Nokogiri 1.2.12 / 1.13.4+ Fix from $1,9502022-03-25 HIGH 7.5 CVE-2021-41098 Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby onl… Nokogiri 1.12.5+ Fix from $1,9502021-09-27