sparklemotion nokogiri
19 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-79772 | 1.5.1 – < 1.19.1 | Nokogiri before 1.19.1 Unchecked Return Value canonicalize | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-79771 | < 1.19.3 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-79770 | < 1.19.3 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer | HIGH 8.7 | 0.5 % | ||
| CVE-2026-79769 | < 1.19.4 | Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args | HIGH 8.7 | 0.3 % | ||
| CVE-2026-57438 | < 1.19.4 | Nokogiri: Possible Use-After-Free in XInclude Processing | LOW 2.2 | 0.1 % | ||
| CVE-2026-57437 | < 1.19.4 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | LOW 1.7 | 0.4 % | ||
| CVE-2026-57436 | < 1.19.4 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | LOW 1.7 | 0.4 % | ||
| CVE-2026-57435 | < 1.19.4 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | LOW 1.7 | 0.5 % | ||
| CVE-2026-57434 | < 1.19.4 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | LOW 1.7 | 0.5 % | ||
| CVE-2026-57235 | < 1.19.4 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | MEDIUM 6.3 | 0.4 % | ||
| CVE-2026-57234 | < 1.19.4 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | LOW 2.6 | 0.2 % | ||
| CVE-2026-57236 | < 1.19.4 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | LOW 1.7 | 0.4 % | ||
| CVE-2025-6494 | c29c920907366cb74af13b4dc2230e9c9e23b833 | sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow | MEDIUM 4.8 | 0.2 % | ||
| CVE-2025-6490 | c29c920907366cb74af13b4dc2230e9c9e23b833 | sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow | MEDIUM 4.8 | 0.2 % | ||
| CVE-2022-23476 | >= 1.13.8, < 1.13.10 | Unchecked return value from xmlTextReaderExpand in Nokogiri | HIGH 7.5 | 1.8 % | ||
| CVE-2022-29181 | < 1.13.6 | Improper Handling of Unexpected Data Type in Nokogiri | HIGH 8.2 | 3.2 % | ||
| CVE-2022-24836 | < 1.13.4 | Inefficient Regular Expression Complexity in Nokogiri | HIGH 7.5 | 3.5 % | ||
| CVE-2021-41098 | < 1.12.5 | Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby | HIGH 7.5 | 1.5 % | ||
| CVE-2020-26247 | < 1.11.0.rc4 | XXE in Nokogiri | MEDIUM 4.3 | 1.2 % |