Package · RubyGems

rexical

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2019-5477

Nokogiri Command Injection Vulnerability

A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called wit…

nokogiri ruby-nokogiri ruby-nokogiri ruby-nokogiri Debian Ubuntu Alpine RubyGems

Aug 16, 2019