Lucene search

K
osvGoogleOSV:GHSA-JMHH-W7XP-WG39
HistoryMay 05, 2022 - 12:29 a.m.

Nokogiri vulnerable to DoS while parsing XML entities

2022-05-0500:29:01
Google
osv.dev
13
nokogiri gem
dos attack
xml entities
software vulnerability

EPSS

0.004

Percentile

72.0%

Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits

EPSS

0.004

Percentile

72.0%