Skip to content
OpenAdvisories
High DLA-3868-1 1 CVE

ruby-nokogiri - security update

Published Sep 3, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 ruby-nokogiri 1.11.1+dfsg-2+deb11u1

Vulnerabilities 1

  • High 7.5
    CVE-2022-24836

    Inefficient Regular Expression Complexity in Nokogiri

    Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokog…

    sparklemotion nokogiri nokogiri ruby-nokogiri Debian Ubuntu Alpine RubyGems