3 matches found
CVE-2012-6685
Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2013-6460
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
CVE-2013-6461
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits