Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | ruby-nokogiri | 1.6.3.1+ds-1+deb8u1 |
Vulnerabilities 1
-
Critical 9.8
Nokogiri Command Injection Vulnerability
A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called wit…