Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/19 4:36 p.m.15 views

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Summary Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage collection or finalization, leading to an invalid memory read or potentially a segfault. Nokogiri...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder