Descripción
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could crash the process. This vulnerability is fixed in 1.19.4.
CVSS 7.5EPSS 0.358%Riesgo 0.77
Ver fuente- Publicación
- 2026-06-25 15:16:40
- Versiones afectadas
- <1.19.4
- Tipo
- Librería
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H