Search CVE reports
1 – 10 of 33 results
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature...
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to...
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into...
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source argument as an xmlNode...
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |
Rejected reason: This CVE ID has been rejected as a duplicate.
1 affected package
ruby-nokogiri
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ruby-nokogiri | Not affected | Not affected | Not affected | Not affected | Not affected |