Skip to content
OpenAdvisories
High DLA-3003-1 1 CVE

ruby-nokogiri - security update

Published May 13, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 ruby-nokogiri 1.6.8.1-1+deb9u2

Vulnerabilities 1

  • High 7.5
    CVE-2022-24836

    Inefficient Regular Expression Complexity in Nokogiri

    Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokog…

    sparklemotion nokogiri nokogiri ruby-nokogiri Debian Ubuntu Alpine RubyGems