Critical DLA-3150-1 1 CVE

rexical - security update

Published Oct 12, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	rexical	1.0.5-2+deb10u1

Vulnerabilities 1

Critical 9.8

CVE-2019-5477

Nokogiri Command Injection Vulnerability

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called wit…

nokogiri ruby-nokogiri ruby-nokogiri ruby-nokogiri Debian Ubuntu Alpine RubyGems

Aug 16, 2019