Debian/ruby-nokogiri: high 7.5
Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML
Action: Upgrade ruby-nokogiri to 1.13.10+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.10+dfsg-1 | - |
Fixed versions
| 1.13.10+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2022-23476#Debian:14/ruby-nokogiri
- https://security-tracker.debian.org/tracker/CVE-2022-23476
published · modified · JSON