Search CVE reports
21 – 23 of 23 results
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
2 affected packages
libnokogiri-ruby, ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libnokogiri-ruby | — | — | — | — | — |
| ruby-nokogiri | — | — | — | — | — |
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
2 affected packages
libnokogiri-ruby, ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libnokogiri-ruby | — | — | — | — | — |
| ruby-nokogiri | — | — | — | — | — |
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented...
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | — | — | Not affected | Not affected | Fixed |