Alpine/ruby-nokogiri: high 7.5
Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from `xmlTextReaderExpand` in the method `Nokogiri::XML
Action: Upgrade ruby-nokogiri to 1.13.10-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.10-r0 | - |
Fixed versions
| 1.13.10-r0 |
Sources
- osv: ALPINE-CVE-2022-23476#Alpine:v3.17/ruby-nokogiri
- https://security.alpinelinux.org/vuln/CVE-2022-23476
published · modified · JSON