{"action":"Upgrade nokogiri to 1.14.3 or later.","affected":[{"fixed":"1.14.3","introduced":"0"}],"component":"nokogiri","cve_ids":["CVE-2023-54354"],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["1.14.3"],"ghsa_id":"GHSA-pxvg-2qj5-37jq","id":"tcs_01M5KEMQXAKZWYCPWE1KQKK39K","modified_at":"2026-08-27T04:10:44.290607152Z","published_at":"2023-04-11T21:48:01Z","references":["https://osv.dev/vulnerability/GHSA-pxvg-2qj5-37jq","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-pxvg-2qj5-37jq","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469","https://github.com/sparklemotion/nokogiri","https://gitlab.gnome.org/GNOME/libxml2/-/commit/09a2dd453007f9c7205274623acdd73747c22d64","https://gitlab.gnome.org/GNOME/libxml2/-/commit/4c6922f763ad958c48ff66f82823ae21f2e92ee6","https://gitlab.gnome.org/GNOME/libxml2/-/commit/647e072ea0a2f12687fa05c172f4c4713fdb0c4f","https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-pxvg-2qj5-37jq","url":"https://osv.dev/vulnerability/GHSA-pxvg-2qj5-37jq"}],"summary":"Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs"}