6 matches found
AZL-91077 CVE-2026-57436 affecting package rubygem-nokogiri for versions less than 1.19.4-1
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...
6.3CVSS5.8AI score0.00402EPSS
SaveExploits0References1
20