RubyGems/nokogiri CVE-2012-6685: high 7.5, EPSS 2.17%

Nokogiri is vulnerable to XML External Entity (XXE) attack

Action: Upgrade nokogiri to 1.5.4 or later.

bundle update nokogiri

Affected

Fixed versions

Sources

• osv: GHSA-6wj9-77wq-jq7p
• https://nvd.nist.gov/vuln/detail/CVE-2012-6685
• https://github.com/sparklemotion/nokogiri/issues/693
• https://bugzilla.redhat.com/show_bug.cgi?id=1178970
• https://github.com/sparklemotion/nokogiri
• https://nokogiri.org/CHANGELOG.html#154-2012-06-12

CVE-2012-6685 · published 2022-04-23T00:40:45Z · modified 2023-11-08T03:57:12.130741Z · JSON