Package impact
RubyGems / nokogiri
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-11068 | critical | 9.8 | 9.8 | 7y ago | RHSA-2020:4464: libxslt security update (Moderate) | |||
| CVE-2016-4658 | critical | 9.8 | 9.8 | 9y ago | Nokogiri does not forbid namespace nodes in XPointer ranges | |||
| CVE-2019-5815 | critical | — | 9.5 | 4y ago | Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data. | |||
| CVE-2017-15412 | critical | — | 9.5 | 9y ago | multiple issues in chromium | |||
| CVE-2022-23437 | unknown | — | — | 4y ago | Infinite Loop in Apache Xerces Java | |||
| CVE-2022-24839 | unknown | — | — | 4y ago | org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption |