{"action":"Upgrade nokogiri to 1.13.4 or later.","affected":[{"fixed":"1.13.4","introduced":"0"}],"component":"nokogiri","cve_ids":["CVE-2018-25032"],"ecosystem":"RubyGems","epss":0.51733,"exploited":false,"fixed_versions":["1.13.4"],"ghsa_id":"GHSA-jc36-42cf-vqwj","id":"tcs_01M5KEKW289DQDC93BYJRQ671J","modified_at":"2026-09-10T03:49:17.620220341Z","published_at":"2022-03-26T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-jc36-42cf-vqwj","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5","https://nvd.nist.gov/vuln/detail/CVE-2018-25032","https://github.com/madler/zlib/issues/605","https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.openwall.com/lists/oss-security/2022/03/28/3","https://www.openwall.com/lists/oss-security/2022/03/28/1","https://www.openwall.com/lists/oss-security/2022/03/24/1","https://www.debian.org/security/2022/dsa-5111","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213255","https://security.netapp.com/advisory/ntap-20220729-0004","https://security.netapp.com/advisory/ntap-20220526-0009","https://security.gentoo.org/glsa/202210-42","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF","https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html","https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html","https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-25032.yml","https://github.com/madler/zlib/compare/v1.2.11...v1.2.12","https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","http://www.openwall.com/lists/oss-security/2022/03/25/2","http://www.openwall.com/lists/oss-security/2022/03/26/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jc36-42cf-vqwj","url":"https://osv.dev/vulnerability/GHSA-jc36-42cf-vqwj"}],"summary":"Nokogiri affected by zlib's Out-of-bounds Write vulnerability"}