CVE-2019-5815

RubyGems/nokogiri CVE-2019-5815: high 7.5

Nokogiri implementation of libxslt vulnerable to heap corruption

Action: Upgrade nokogiri to 1.10.5 or later.

bundle update nokogiri

Affected

Fixed versions

Sources

• osv: GHSA-vmfx-gcfq-wvm2
• https://nvd.nist.gov/vuln/detail/CVE-2019-5815
• https://github.com/sparklemotion/nokogiri/issues/2630
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-5815.yml
• https://github.com/sparklemotion/nokogiri
• https://gitlab.gnome.org/GNOME/libxslt/commit/08b62c25871b38d5d573515ca8a065b4b8f64f6b
• https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html

CVE-2019-5815 · published 2022-05-24T17:03:17Z · modified 2024-02-16T08:22:10.222527Z · JSON