Lucene search
+L

1 matches found

OSV
OSV
added 2021/02/04 1:40 p.m.8 views

MGASA-2021-0063 Updated ruby-nokogiri packages fix security vulnerabilities

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's Kernel.open method. Processes are vulnerable only if the undocumented method Nokogiri::CSS::Tokenizerloadfile is being called with unsafe user input as the filename...

9.8CVSS7AI score0.05899EPSS
SaveExploits0References4
Rows per page
Query Builder