Lucene search
+L

6 matches found

OSV
OSV
•added 2026/06/25 3:16 p.m.•17 views

AZL-91077 CVE-2026-57436 affecting package rubygem-nokogiri for versions less than 1.19.4-1

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Rows per page
Query Builder