nokogiri
RubyGems32 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting nokogiripage 1 of 1
- CVE-2012-6685HIGHCVSS 7.5EG 7.5✓ Fixed in 1.5.42020-02-19
vulnerable: 1.0.0 ... 1.5.4.rc3 (47 versions)
Nokogiri before 1.5.4 is vulnerable to XXE attacks
- CVE-2013-6460MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.6.12019-11-05
vulnerable: 1.6.0
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
- CVE-2013-6461MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.6.12019-11-05
vulnerable: 1.6.0
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
- CVE-2015-1819NONECVSS 0.0EG 0.0✓ Fixed in 1.6.6.42015-08-14
vulnerable: 1.6.6.1, 1.6.6.2, 1.6.6.3
The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack.
- CVE-2015-5312NONECVSS 0.0EG 0.0✓ Fixed in 1.6.7.12015-12-15
vulnerable: 1.6.0 ... 1.6.7.rc4 (23 versions)
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a differe…
- CVE-2015-7499NONECVSS 0.0EG 0.0✓ Fixed in 1.6.7.22015-12-15
vulnerable: 1.6.0 ... 1.6.7.rc4 (24 versions)
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
- CVE-2015-8806HIGHCVSS 7.5EG 7.5✓ Fixed in 1.6.82016-04-13
vulnerable: 1.6.0 ... 1.6.8.rc3 (28 versions)
dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.
- CVE-2016-4658CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.7.12016-09-25
vulnerable: 1.0.0 ... 1.7.0.1 (97 versions)
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute a…
- CVE-2017-15412HIGHCVSS 8.8EG 8.8✓ Fixed in 1.8.22018-08-28
vulnerable: 1.0.0 ... 1.8.1 (101 versions)
Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2017-16932HIGHCVSS 7.5EG 7.5✓ Fixed in 1.8.12017-11-23
vulnerable: 1.0.0 ... 1.8.0 (100 versions)
parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.
- CVE-2017-18258MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.8.22018-04-08
vulnerable: 1.0.0 ... 1.8.1 (101 versions)
The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required…
- CVE-2017-5029HIGHCVSS 8.8EG 8.8✓ Fixed in 1.7.22017-04-24
vulnerable: 1.0.0 ... 1.7.1 (98 versions)
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculati…
- CVE-2017-9050HIGHCVSS 7.5EG 7.5✓ Fixed in 1.8.12017-05-18
vulnerable: 1.0.0 ... 1.8.0 (100 versions)
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of…
- CVE-2018-14404MEDIUMCVSS 6.5EG 6.5✓ Fixed in 1.8.52018-07-19
vulnerable: 1.0.0 ... 1.8.4 (104 versions)
A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL f…
- CVE-2018-25032HIGHCVSS 7.5EG 7.5✓ Fixed in 1.13.42022-03-25
vulnerable: 1.0.0 ... 1.9.1 (143 versions)
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
- CVE-2018-8048MEDIUMCVSS 6.1EG 6.1✓ Fixed in 1.8.32018-03-27
vulnerable: 1.0.0 ... 1.8.2 (102 versions)
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
- CVE-2019-11068CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.10.32019-04-10
vulnerable: 1.0.0 ... 1.9.1 (112 versions)
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invali…
- CVE-2019-13117MEDIUMCVSS 5.3EG 5.3✓ Fixed in 1.10.52019-07-01
vulnerable: 1.0.0 ... 1.9.1 (114 versions)
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a…
- CVE-2019-13118MEDIUMCVSS 5.3EG 5.3✓ Fixed in 1.10.52019-07-01
vulnerable: 1.0.0 ... 1.9.1 (114 versions)
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack…
- CVE-2019-18197HIGHCVSS 7.5EG 7.5✓ Fixed in 1.10.52019-10-18
vulnerable: 1.0.0 ... 1.9.1 (114 versions)
In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buff…
- CVE-2019-5477CRITICALCVSS 9.8EG 9.8✓ Fixed in 1.10.42019-08-16
vulnerable: 1.0.0 ... 1.9.1 (113 versions)
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file`…
- CVE-2019-5815HIGHCVSS 7.5EG 7.5✓ Fixed in 1.10.52019-12-11
vulnerable: 1.0.0 ... 1.9.1 (114 versions)
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
- CVE-2020-26247LOWCVSS 2.6EG 2.6✓ Fixed in 1.11.02020-12-30
vulnerable: 1.0.0 ... 1.9.1 (124 versions)
Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default…
- CVE-2020-7595HIGHCVSS 7.5EG 7.5✓ Fixed in 1.10.82020-01-21
vulnerable: 1.0.0 ... 1.9.1 (117 versions)
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
- CVE-2021-30560HIGHCVSS 8.8EG 8.8✓ Fixed in 1.13.22021-08-03
vulnerable: 1.0.0 ... 1.9.1 (141 versions)
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2021-3517HIGHCVSS 8.6EG 8.6✓ Fixed in 1.11.42021-05-19
vulnerable: 1.0.0 ... 1.9.1 (128 versions)
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigg…
- CVE-2021-3518HIGHCVSS 8.8EG 8.8✓ Fixed in 1.11.42021-05-18
vulnerable: 1.0.0 ... 1.9.1 (128 versions)
There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidenti…
- CVE-2021-3537MEDIUMCVSS 5.9EG 5.9✓ Fixed in 1.11.42021-05-14
vulnerable: 1.0.0 ... 1.9.1 (128 versions)
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the…
- CVE-2021-41098HIGHCVSS 7.5EG 7.5✓ Fixed in 1.12.52021-09-27
vulnerable: 1.0.0 ... 1.9.1 (138 versions)
Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who pa…
- CVE-2022-23476HIGHCVSS 7.5EG 7.5✓ Fixed in 1.13.102022-12-08
vulnerable: 1.13.8, 1.13.9
Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML::Reader#attribute_hash`. This can lead…
- CVE-2022-24836HIGHCVSS 7.5EG 7.5✓ Fixed in 1.13.42022-04-11
vulnerable: 1.0.0 ... 1.9.1 (143 versions)
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised…
- CVE-2022-29181HIGHCVSS 8.2EG 8.2✓ Fixed in 1.13.62022-05-20
vulnerable: 1.0.0 ... 1.9.1 (145 versions)
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors…
Check whether nokogiri is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for nokogiri CVEs against the assets you own.
Start Free Scan →