Lucene search
+L

16822 matches found

OSV
OSV
added 2026/06/25 3:16 p.m.9 views

UBUNTU-CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/25 3:16 p.m.7 views

UBUNTU-CVE-2026-57234

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, the NONET parse option, which Nokogiri turns on by default for Nokogiri::XML::Schema see CVE-2020-26247, was not correctly enforced on the JRuby implementation. As a result, a schema parsed with...

2.6CVSS5.8AI score0.00166EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/06/25 2:39 p.m.9 views

CVE-2026-57438

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML::Nodedoxinclude replaced each in place, freeing the include node along with its children such as and its descendants and any namespaces declared on...

6.6CVSS5.9AI score0.00094EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/06/25 2:39 p.m.8 views

CVE-2026-57438

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML::Nodedoxinclude replaced each in place, freeing the include node along with its children such as and its descendants and any namespaces declared on...

5.9CVSS5.9AI score0.00094EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/06/25 2:39 p.m.14 views

CVE-2026-57438

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, XInclude substitution performed by Nokogiri::XML::Nodedoxinclude replaced each in place, freeing the include node along with its children such as and its descendants and any namespaces declared on...

6.6CVSS5.9AI score0.00094EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/06/25 2:34 p.m.15 views

CVE-2026-57437

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage collection. If an XPathContext outlived its document and the document was collected, evaluating an XPath expression...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/25 2:34 p.m.13 views

EUVD-2026-39428

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage collection. If an XPathContext outlived its document and the document was collected, evaluating an XPath expression...

6.3CVSS5.9AI score0.00321EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/25 2:34 p.m.12 views

CVE-2026-57437

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage collection. If an XPathContext outlived its document and the document was collected, evaluating an XPath expression...

6.3CVSS5.9AI score0.00321EPSS
SaveExploits0
CVE
CVE
added 2026/06/25 2:33 p.m.46 views

CVE-2026-57436

Summary: The CVE affects Nokogiri (Ruby) prior to 1.19.4, where Nokogiri::XML::Document#root= could accept a DTD node as the document root, causing a heap use-after-free during garbage collection/finalization and potentially an invalid memory read or segfault. Root cause: setting a non-root node ...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/25 2:33 p.m.11 views

EUVD-2026-39427

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/06/25 2:33 p.m.12 views

CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/25 2:33 p.m.12 views

CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0
OSV
OSV
added 2026/06/25 2:33 p.m.10 views

CVE-2026-57436 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

6.3CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/25 2:32 p.m.46 views

CVE-2026-57435 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node,...

6.3CVSS0.00368EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/25 2:32 p.m.13 views

EUVD-2026-39426

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node,...

6.3CVSS5.9AI score0.00368EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/25 2:32 p.m.11 views

CVE-2026-57435

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node,...

7.5CVSS5.9AI score0.00368EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/06/25 2:32 p.m.13 views

CVE-2026-57435

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri’s CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an XML attribute. If Ruby code had already accessed an attribute child node,...

7.5CVSS5.8AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 2:32 p.m.50 views

CVE-2026-57435

Nokogiri (Ruby XML/HTML library) had a use-after-free in the CRuby native extension when replacing the value of an XML attribute. If an attribute child node was already accessed, Nokogiri::XML::Attr#value= could free the underlying native child node while a wrapper remained in the document cache,...

7.5CVSS5.9AI score0.00368EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/06/25 2:32 p.m.11 views

CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

7.5CVSS5.8AI score0.00358EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/06/25 2:32 p.m.11 views

CVE-2026-57434

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could...

7.5CVSS5.9AI score0.00358EPSS
SaveExploits0
Rows per page
Query Builder