Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | ruby-nokogiri | 1.6.8.1-1+deb9u1 |
Vulnerabilities 1
-
Low 2.6
XXE in Nokogiri
Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default, allowing external …