Known vulnerabilities in ruby-nokogiri (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:ruby-nokogiri_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ruby-nokogiri (Ubuntu package) ruby-nokogiri (Ubuntu package) is affected by 4 known vulnerabilities: 2 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116191 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-26247
CWE-611 Low
No
No
1.10.7+dfsg1-2ubuntu0.1~esm2, 1.13.1+dfsg-2ubuntu0.1~esm1 30.09.2025 SB2020123029
SB2025093034
SB2022081556
and 1 more
#VU69583 - Improper input validation
CVE-2022-29181
CWE-20 Medium
No
No
1.10.7+dfsg1-2ubuntu0.1~esm2, 1.13.1+dfsg-2ubuntu0.1~esm1 24.11.2022 SB2022112433
SB2022112434
SB2022112435
and 12 more
#VU68828 - Integer overflow
CVE-2022-40303
CWE-190 High
No
No
1.10.7+dfsg1-2ubuntu0.1~esm2, 1.13.1+dfsg-2ubuntu0.1~esm1 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU32012 - Command injection
CVE-2019-5477
CWE-77 High
No
No
1.6.7.2-3ubuntu0.1, 1.8.2-1ubuntu0.1, 1.10.0+dfsg1-2ubuntu0.1, 1.10.3+dfsg1-2ubuntu0.1 16.08.2019 SB2019081649
SB2019081222
SB2020061310
and 1 more