CVE-2021-41098
1 advisory.
RubyGems/nokogiri CVE-2021-41098: high 7.5
Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
Action: Upgrade nokogiri to 1.12.5 or later.
bundle update nokogiriAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.5 | - |
Fixed versions
| 1.12.5 |
Sources
- osv: GHSA-2rr5-8q37-2w7h
- https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2rr5-8q37-2w7h
- https://nvd.nist.gov/vuln/detail/CVE-2021-41098
- https://github.com/sparklemotion/nokogiri/commit/5bf729ff3cc84709ee3c3248c981584088bf9f6d
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2021-41098.yml
- https://github.com/sparklemotion/nokogiri
CVE-2021-41098 · published · modified · JSON