{"action":"Upgrade nokogiri to 1.7.1 or later.","affected":[{"fixed":"1.7.1","introduced":"0"}],"component":"nokogiri","cve_ids":["CVE-2016-4658"],"ecosystem":"RubyGems","epss":0.08559,"exploited":false,"fixed_versions":["1.7.1"],"ghsa_id":"GHSA-fr52-4hqw-p27f","id":"tcs_01M5KEK4V1BGA9YSRVST84E4BX","modified_at":"2024-02-16T08:15:24.828530Z","published_at":"2018-08-21T19:03:26Z","references":["https://osv.dev/vulnerability/GHSA-fr52-4hqw-p27f","https://nvd.nist.gov/vuln/detail/CVE-2016-4658","https://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b","https://security.gentoo.org/glsa/201701-37","https://support.apple.com/HT207141","https://support.apple.com/HT207142","https://support.apple.com/HT207143","https://support.apple.com/HT207170","http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fr52-4hqw-p27f","url":"https://osv.dev/vulnerability/GHSA-fr52-4hqw-p27f"}],"summary":"Nokogiri does not forbid namespace nodes in XPointer ranges"}