5 matches found
CVE-2024-58377
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2024-58377
Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...
CVE-2024-58377
Nokogiri versions before 1.16.5 bundle libxml2 2.12.6 , which is affected by CVE-2024-34459 in the xmllint tool. The underlying issue is an uncontrolled search path element : an attacker can potentially influence the search path used for external libraries by manipulating environment variables or...
PT-2026-81340
Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.16.5 Description Nokogiri bundles libxml2 version 2.12.6, which contains an issue within the xmllint tool. However, there is no impact to users as Nokogiri does not provide or expose the xmllint tool. Recommendatio...