VDB
GHSA-wx95-c6cv-8532
GHSA-wx95-c6cv-8532
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Nokogiri does not check the return value from xmlC14NExecute
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | ruby3.4-rails-8.1 | 0 |
| chainguard | ruby3.3-rails-7.2 | 0 |
| chainguard | ruby3.4-rails-7.2 | 0 |
| chainguard | ruby3.2-rails-7.1 | 0 |
| chainguard | ruby3.4-rails-8.1 | 0 |
| chainguard | ruby3.2-rails-8.1 | 0 |
| wolfi | ruby3.4-rails-8.0 | 0 |
| chainguard | ruby3.4-rails-8.0 | 0 |
| RubyGems | nokogiri | 1.10.2, 1.8.2, 1.8.0 |
| chainguard | ruby3.4-rails-7.1 | 0 |
| wolfi | ruby4.0-rails-8.1 | 0 |
| sparklemotion | nokogiri | |
| wolfi | ruby3.2-rails-8.1 | 0 |
| chainguard | ruby3.3-rails-7.1 | 0 |
| chainguard | ruby3.3-rails-8.1 | 0 |
| chainguard | ruby4.0-rails-7.2 | 0 |
| chainguard | ruby3.2-rails-7.2 | 0 |
| wolfi | ruby3.3-rails-8.1 | 0 |
| wolfi | ruby3.2-rails-8.0 | 0 |
| chainguard | ruby4.0-rails-8.1 | 0 |
…and 5 more
Timeline
- Feb 18, 2026 CVE Published
- Sep 8, 2026 Security Advisory