CVE-2024-58377

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

CVE-2024-58377

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6 , which inherits CVE-2024-34459 in libxml2's xmllint tool. The fix in 1.16.5 upgrades the bundled libxml2 to 2.12.7. Per the maintainers, there is no practical impact to Nokogiri users because Nokogiri does not provide or expose the xmllint bi...