Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/19 4:37 p.m.13 views

GHSA-PHWJ-RPRQ-35PP Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Summary Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node, Nokogiri::XML::Attrvalue= could free the underlying native child node while the wrapper remained...

6.3CVSS5.9AI score0.00368EPSS
SaveExploits0References2
Rows per page
Query Builder