Lucene search

K
cvelistGitHub_MCVELIST:CVE-2022-24839
HistoryApr 11, 2022 - 9:25 p.m.

CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

2022-04-1121:25:12
CWE-400
GitHub_M
raw.githubusercontent.com

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri (Rubygem) raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to >= 1.9.22.noko2. Note: The upstream library org.cyberneko.html is no longer maintained. Nokogiri uses its own fork of this library located at https://github.com/sparklemotion/nekohtml and this CVE applies only to that fork. Other forks of nekohtml may have a similar vulnerability.

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%