7268 matches found
CVE-2022-50999
Nokogiri versions before 1.13.5 contain an integer overflow in the packaged libxml2 buffer handling functions. Attackers can exploit this by supplying multi-gigabyte XML files that trigger out-of-bounds memory writes, potentially leading to information disclosure , data modification , or denial o...
EUVD-2021-34866
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
EUVD-2022-56023
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2021-47996
Nokogiri before 1.11.4 (CRuby implementation, when using the bundled/vendored libxml2) ships libxml2 2.9.10 , which carries multiple known flaws later fixed in libxml2 2.9.12. These include a memory leak in xmlSchemaValidateStream (CVE-2019-20388), a global buffer over-read in xmlEncodeEntitiesIn...
CVE-2021-47996 Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
CVE-2021-47996 Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2
Nokogiri before 1.11.4 CRuby implementation only, when the packaged/vendored libxml2 is used bundles libxml2 2.9.10, which is affected by multiple vulnerabilities addressed in libxml2 2.9.12, including a memory leak in xmlSchemaValidateStream CVE-2019-20388, a global buffer over-read in...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
CVE-2022-50998
Nokogiri (CRuby implementation using packaged libraries) versions before 1.13.9 bundle libxml2 v2.9.14 , which is susceptible to two underlying flaws: CVE-2022-40304 (a double-free from an entity reference cycle when entity content is allocated from a dict) and CVE-2022-40303 (integer overflows d...
CVE-2022-50998 Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
Nokogiri before 1.13.9 CRuby implementation using packaged libraries bundles libxml2 v2.9.14, which is affected by CVE-2022-40304 data corruption / double-free from an entity reference cycle when entity content is allocated from a dict and CVE-2022-40303 integer overflows when parsing with...
ROOT-OS-DEBIAN-12-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root
Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-6732 CVE-2026-6732 in libxml2 - Patched by Root
Root has patched CVE-2026-6732 in the libxml2 package for Root:Debian:12. Multiple fixed versions available...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues
Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2024-34459...
ROOT-OS-DEBIAN-13-CVE-2026-6653 CVE-2026-6653 in libxml2 - Patched by Root
Root has patched CVE-2026-6653 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-12863 CVE-2025-12863 in libxml2 - Patched by Root
Root has patched CVE-2025-12863 in the libxml2 package for Root:Debian:13. Multiple fixed versions available...
Astra Linux – Vulnerability in libxml2
The GNOME project’s libxml2 v2.9.10 has a global buffer over-read vulnerability in the xmlEncodeEntitiesInternal function within libxml2/entities.c. This issue has been fixed in the commit numbered 50f06b3e...
Astra Linux – Vulnerability in libxml2
A issue was discovered in libxml2 before version 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several integer counters may overflow. This leads to an attempt to access an array at a negative 2GB offset, typically resulting in a segmentation fault...
Astra Linux – Vulnerability in libxml2
A issue was discovered in libxml2 before version 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logical errors. In one case, a double-free can occur...
Astra Linux – Vulnerability in libxml2
A issue was discovered in libxml2 before version 2.10.4. When hashing empty dictionary strings in a crafted XML document, the xmlDictComputeFastKey function in dict.c can produce non-deterministic values, resulting in various logical and memory errors, such as double-free errors. This behavior...