| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-79772 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri versions before 1.19.1 fail to check the return value from xm ... |
| CVE-2026-79771 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Styl ... |
| CVE-2026-79770 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri versions before 1.19.3 contain regular expression denial of s ... |
| CVE-2026-79769 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bou ... |
| CVE-2026-57438 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57437 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57436 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57435 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57434 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57236 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2026-57235 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| Bug | Description |
|---|
| CVE-2025-6494 | A vulnerability was found in sparklemotion nokogiri c29c920907366cb74a ... |
| CVE-2025-6490 | A vulnerability was found in sparklemotion nokogiri c29c920907366cb74a ... |
| CVE-2023-54354 | Nokogiri before 1.14.3 (CRuby implementation only, when using the pack ... |
| CVE-2022-51000 | Nokogiri before 1.13.2 (CRuby, when using packaged libraries) ships ve ... |
| CVE-2022-50999 | Nokogiri versions before 1.13.5 contain an integer overflow vulnerabil ... |
| CVE-2022-50998 | Nokogiri before 1.13.9 (CRuby implementation using packaged libraries) ... |
| CVE-2022-29181 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri pri ... |
| CVE-2022-24836 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< ... |
| CVE-2022-23476 | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2021-47996 | Nokogiri before 1.11.4 (CRuby implementation only, when the packaged/v ... |
| CVE-2021-41098 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers wit ... |
| CVE-2020-26247 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers wit ... |
| CVE-2019-5477 | A command injection vulnerability in Nokogiri v1.10.3 and earlier allo ... |
| CVE-2013-6461 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by fai ... |
| CVE-2013-6460 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsin ... |
| CVE-2012-6685 | Nokogiri before 1.5.4 is vulnerable to XXE attacks |