Known vulnerabilities in Nokogiri

Software: Nokogiri
Software CPE: cpe:2.3:a:nokogiri.org:nokogiri:*:*:*:*:*:ruby:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nokogiri Nokogiri is affected by 10 known vulnerabilities: 2 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116191 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-26247
CWE-611 Low
No
No
1.11.0 30.09.2025 SB2020123029
SB2025093034
SB2022081556
and 1 more
#VU89430 - Heap-based Buffer Overflow
CVE-2024-34459
CWE-122 Medium
No
No
1.16.5 14.05.2024 SB2024051432
SB2024051433
SB2024051631
and 31 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
1.15.6, 1.16.2 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU74864 - NULL Pointer Dereference
CVE-2023-42869
CWE-476 Medium
No
No
1.14.3 11.04.2023 SB2023041144
SB2023041145
SB2023051860
and 1 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484
CWE-476 Medium
No
No
1.14.3 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469
CWE-399 Medium
No
No
1.14.3 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU70042 - NULL Pointer Dereference
CVE-2022-23476
CWE-476 Medium
No
No
1.13.10 08.12.2022 SB2022120804
SB2023120175
SB2024080760
and 2 more
#VU69583 - Improper input validation
CVE-2022-29181
CWE-20 Medium
No
No
1.13.6 24.11.2022 SB2022112433
SB2022112434
SB2022112435
and 12 more
#VU64190 - Incorrect Regular Expression
CVE-2022-24836
CWE-185 Low
No
No
1.13.4 12.06.2022 SB2022061205
SB2022061209
SB2022111849
and 11 more
#VU32012 - Command injection
CVE-2019-5477
CWE-77 High
No
No
1.10.4 16.08.2019 SB2019081649
SB2019081222
SB2020061310