Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

nokogiri

rubygems

Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2, libgumbo, or xerces.

View on github.com · View on rubygems.org

Security Advisories for nokogiri in rubygems

Critical
5 months ago

Nokogiri patches vendored libxml2 to resolve multiple CVEs GSA_kwCzR0hTQS0zNTNmLXg0Z2gtY3FxOM4ABKWI

rubygems nokogiri
Low
8 months ago

Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415 GSA_kwCzR0hTQS01dzZ2LTM5OXYtdzNjY84ABHEb

rubygems nokogiri
High
9 months ago

Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs GSA_kwCzR0hTQS1tcnh3LW14aGotcDY2NM4ABFxV

rubygems nokogiri
Low
10 months ago

Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 GSA_kwCzR0hTQS12dmZxLThod3ItcW00bc4ABEmO

rubygems nokogiri
Low
over 1 year ago

Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459 GSA_kwCzR0hTQS1yOTVoLTl4OGYtcjNmN84AA74p

rubygems nokogiri
Moderate
almost 2 years ago

Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062 GSA_kwCzR0hTQS14Yzl4LWpqNzctOXA5as4AA5Ek

rubygems nokogiri
Moderate
over 2 years ago

Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs GSA_kwCzR0hTQS1weHZnLTJxajUtMzdqcc4AAytn

rubygems nokogiri
High
almost 3 years ago

Unchecked return value from xmlTextReaderExpand GSA_kwCzR0hTQS1xdjRxLW1yNXItcXByas4AAwNH

rubygems nokogiri
Moderate
about 3 years ago

Update bundled libxml2 to v2.10.3 to resolve multiple CVEs GSA_kwCzR0hTQS0ycWM2LW1jdnctOTJjd84AAvaT

rubygems nokogiri
High
over 3 years ago

Nokogiri has vulnerable dependencies on libxml2 and libxslt GSA_kwCzR0hTQS01OWdwLXFxbTctY3c0as4AApYf

rubygems nokogiri
High
over 3 years ago

Nokogiri contains libxml Out-of-bounds Write vulnerability GSA_kwCzR0hTQS1qdzlmLWhoNDktY3ZwOc4AAoiz

rubygems nokogiri
High
over 3 years ago

Nokogiri Implements libxml2 version vulnerable to use-after-free GSA_kwCzR0hTQS12NGY4LTI4NDctcndtN84AAoiI

rubygems nokogiri
Moderate
over 3 years ago

Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing GSA_kwCzR0hTQS0yODZ2LXBjZjUtMjVyY84AAof1

rubygems nokogiri
High
over 3 years ago

Nokogiri implementation of libxslt vulnerable to heap corruption GSA_kwCzR0hTQS12bWZ4LWdjZnEtd3ZtMs4AAi6z

rubygems nokogiri
High
over 3 years ago

Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability GSA_kwCzR0hTQS0yNDJ4LTdjbTYtNHc4as4AAid7

rubygems nokogiri
High
over 3 years ago

libxslt Type Confusion vulnerability that affects Nokogiri GSA_kwCzR0hTQS1jZjQ2LTZ4eGgtcGM3Nc4AAhJV

rubygems nokogiri
High
over 3 years ago

Uninitialized read in Nokogiri gem GSA_kwCzR0hTQS00aG05LTg0NGotam14cM4AAhJW

rubygems nokogiri
High
over 3 years ago

Nokogiri Improperly Handles Unexpected Data Type GSA_kwCzR0hTQS14aDI5LXIydzUtd3g4bc4AAgdN

rubygems nokogiri
High
over 3 years ago

Integer Overflow or Wraparound in libxml2 affects Nokogiri GSA_kwCzR0hTQS1jZ3g2LWhwd3EtZmh2Nc4AAgZn

rubygems nokogiri
High
over 3 years ago

Nokogiri gem, via libxml, is affected by DoS vulnerabilities GSA_kwCzR0hTQS1yNThyLTc0Z3gtNnd4M84AAVTq

rubygems nokogiri
Critical
over 3 years ago

Nokogiri vulnerable to libxslt protection mechanism bypass GSA_kwCzR0hTQS1xeGNnLXhqamctNjZtas4AAQF8

rubygems nokogiri
High
over 3 years ago

Nokogiri gem, via libxml, is affected by DoS vulnerabilities GSA_kwCzR0hTQS14MmZtLTkzd3ctZ2d2eM3pEA

rubygems nokogiri
Moderate
over 3 years ago

Nokogiri vulnerable to DoS while parsing XML documents GSA_kwCzR0hTQS02MnFwLTNmeG0tOXd4Zs3gJg

rubygems nokogiri
Moderate
over 3 years ago

Nokogiri vulnerable to DoS while parsing XML entities GSA_kwCzR0hTQS1qbWhoLXc3eHAtd2czOc3gKA

rubygems nokogiri
High
over 3 years ago

Nokogiri is vulnerable to XML External Entity (XXE) attack GSA_kwCzR0hTQS02d2o5LTc3d3EtanE3cM1Auw

rubygems nokogiri
High
over 3 years ago

Denial of Service (DoS) in Nokogiri on JRuby GSA_kwCzR0hTQS1neDh4LWc4N20taDVxNs055Q

rubygems nokogiri
Moderate
over 3 years ago

XML Injection in Xerces Java affects Nokogiri GSA_kwCzR0hTQS14eHg5LTN4Y3ItZ2pqM8055A

rubygems nokogiri
High
over 3 years ago

Out-of-bounds Write in zlib affects Nokogiri GSA_kwCzR0hTQS12NmdwLTltbW0tYzZwNc054w

rubygems nokogiri
High
over 3 years ago

Nokogiri Inefficient Regular Expression Complexity GSA_kwCzR0hTQS1jcmpyLTlyYzUtZ2h3OM054g

rubygems nokogiri
High
over 3 years ago

Nokogiri affected by zlib's Out-of-bounds Write vulnerability GSA_kwCzR0hTQS1qYzM2LTQyY2YtdnF3as018g

rubygems nokogiri
High
almost 4 years ago

Vulnerable dependencies in Nokogiri GSA_kwCzR0hTQS1mcTQyLWM1cmctOTJjMs0u1A

rubygems nokogiri
High
about 4 years ago

Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby GSA_kwCzR0hTQS0ycnI1LThxMzctMnc3aM0V_Q

rubygems nokogiri
Moderate
over 4 years ago

Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12 MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdycm0tdjQ1Zi1qcDY0

rubygems nokogiri
Moderate
almost 5 years ago

Nokogiri::XML::Schema trusts input by default, exposing risk of XXE vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZyOHEtZzVjNy1tNTRt

rubygems nokogiri
High
almost 6 years ago

libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1NTMtanI5OC12eDQ3

rubygems nokogiri
Critical
over 6 years ago

Nokogiri Command Injection Vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNyNWotOTUzai14dzVw

rubygems rexical, nokogiri
High
almost 7 years ago

Nokogiri NULL Pointer Dereference MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZxdnAtcjZyMy05cDdo

rubygems nokogiri
Moderate
about 7 years ago

Heap-based buffer overflow in nokogiri MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWp4anItNWg2OS1xdzN3

rubygems nokogiri
High
about 7 years ago

Denial of service or RCE from libxml2 and libxslt MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdocDIteHdwai05NWpx

rubygems nokogiri
Critical
over 7 years ago

Nokogiri does not forbid namespace nodes in XPointer ranges MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZyNTItNGhxdy1wMjdm

rubygems nokogiri
High
over 7 years ago

Nokogiri subject to DoS via libxml2 vulnerability MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhqcWctOWp2Zy1mZ3gy

rubygems nokogiri
Moderate
over 7 years ago

Nokogiri vulnerable to libxml XML Entity Expansion MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3d3gtNjJyNy1qMng3

rubygems nokogiri
High
over 7 years ago

Nokogiri implementation of libxslt lacks integer overflow checks MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXBmNm0tZnhwcS1mZzh2

rubygems nokogiri
Moderate
over 7 years ago

Uncontrolled resource consumption in nokogiri MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4MnAtanFnbS1mNDVn

rubygems nokogiri
High
almost 8 years ago

Out-of-bounds read in nokogiri MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThjNTYtY3Btdy04OXg3

rubygems nokogiri

Filter by Severity

High 26 Moderate 12 Critical 4 Low 3