Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2022-24836
Description:Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.
Test IDs: 1.3.6.1.4.1.25623.1.0.893149   1.3.6.1.4.1.25623.1.0.820555   1.3.6.1.4.1.25623.1.0.893003   1.3.6.1.4.1.25623.1.0.820358   1.3.6.1.4.1.25623.1.1.1.2.2024.3868   1.3.6.1.4.1.25623.1.0.820408   1.3.6.1.4.1.25623.1.1.10.2022.0164  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-24836
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-crjr-9rc5-ghw8
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XMDCWRQXJQ3TFSETPCEFMQ6RR6ME5UA3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OUPLBUZVM4WPFSXBEP2JS3R6LMKRTLFC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DHCOWMA5PQTIQIMDENA7R2Y5BDYAIYM/
http://seclists.org/fulldisclosure/2022/Dec/23
https://security.gentoo.org/glsa/202208-29
https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
https://github.com/sparklemotion/nokogiri/commit/e444525ef1634b675cd1cf52d39f4320ef0aecfd
https://lists.debian.org/debian-lts-announce/2022/05/msg00013.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00018.html




© 1998-2025 E-Soft Inc. All rights reserved.