Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

nokogiri

43 known vulnerabilities (1 critical, 12 high, 6 medium, 8 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
43 · 1 critical, 12 high, 6 medium, 8 low
Registry
RubyGems

Advisories 43

  • CVE-2026-79772Medium 6.9

    Nokogiri before 1.19.1 Unchecked Return Value canonicalize

    Affected: from 1.5.1, fixed in 1.19.1.

  • CVE-2026-79771Medium 6.9

    Nokogiri before 1.19.3 Memory Leak via XSLT Transform

    Affected: fixed in 1.19.3.

  • Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

    Affected: fixed in 1.19.3.

  • Nokogiri: Possible Use-After-Free in XInclude Processing

    Affected: fixed in 1.19.4.

  • Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

    Affected: fixed in 1.19.4.

  • Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

    Affected: fixed in 1.19.4.

  • Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

    Affected: fixed in 1.19.4.

  • Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

    Affected: fixed in 1.19.4.

  • CVE-2026-57235Medium 6.3

    Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`

    Affected: fixed in 1.19.4.

  • Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

    Affected: fixed in 1.19.4.

  • Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

    Affected: fixed in 1.19.4.

  • Unchecked return value from xmlTextReaderExpand in Nokogiri

    Affected: from 1.13.8, fixed in 1.13.10.

  • Improper Handling of Unexpected Data Type in Nokogiri

    Affected: fixed in 1.13.6.

  • Inefficient Regular Expression Complexity in Nokogiri

    Affected: fixed in 1.13.4.

  • zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

    Affected: fixed in 1.13.4.

Show all 43 advisoriesShow fewer advisories

  • Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby

    Affected: fixed in 1.12.5.

  • Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via…

    Affected: fixed in 1.13.2.

  • There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.

    Affected: fixed in 1.11.4.

  • There's a flaw in libxml2 in versions before 2.9.11.

    Affected: fixed in 1.11.4.

  • A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing…

    Affected: fixed in 1.11.4.

  • XXE in Nokogiri

    Affected: fixed in 1.11.0.

  • Nokogiri before 1.5.4 is vulnerable to XXE attacks

    Affected: fixed in 1.5.4.

  • xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

    Affected: fixed in 1.10.8.

  • Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption…

    Affected: fixed in 1.10.5.

  • Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

    Affected: from 1.5.0, fixed in 1.5.11; from 1.6.0, fixed in 1.6.1.

  • Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents

    Affected: from 1.5.0, fixed in 1.5.11; from 1.6.0, fixed in 1.6.1.

  • In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances.

    Affected: fixed in 1.10.5.

  • A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open`…

    Affected: fixed in 1.10.4.

  • CVE-2019-13118Medium 5.3

    In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid…

    Affected: fixed in 1.10.5.

  • CVE-2019-13117Medium 5.3

    In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in…

    Affected: fixed in 1.10.5.

  • CVE-2019-11068Critical 9.8

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon…

    Affected: fixed in 1.10.3.

  • Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to…

    Affected: fixed in 1.8.2.

  • CVE-2018-14404Medium 6.5

    A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invali

    Affected: fixed in 1.8.5.

  • The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a craf

    Affected: fixed in 1.8.2.

  • In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML…

    Affected: fixed in 1.8.3.

  • parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

    Affected: fixed in 1.8.1.

  • libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c.

    Affected: fixed in 1.8.1.

  • The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows…

    Affected: fixed in 1.7.2.

  • xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other produ

    Affected: fixed in 1.7.1.

  • dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an…

    Affected: from 1.6.0, fixed in 1.6.8.

  • Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain…

    Affected: from 1.6.0, fixed in 1.6.7.2.

  • The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows…

    Affected: from 1.6.0, fixed in 1.6.7.1.

  • The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML…

    Affected: from 1.6.6.0, fixed in 1.6.6.4.