CVE-2023-54354

RubyGems/nokogiri CVE-2023-54354: medium

Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs

Action: Upgrade nokogiri to 1.14.3 or later.

bundle update nokogiri

Affected

Fixed versions

Sources

• osv: GHSA-pxvg-2qj5-37jq
• https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-pxvg-2qj5-37jq
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469
• https://github.com/sparklemotion/nokogiri
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/4c6922f763ad958c48ff66f82823ae21f2e92ee6
• https://gitlab.gnome.org/GNOME/libxml2/-/commit/647e072ea0a2f12687fa05c172f4c4713fdb0c4f
• https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4

CVE-2023-54354 · published 2023-04-11T21:48:01Z · modified 2026-08-27T04:10:44.290607152Z · JSON