Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/nokogiri@1.5
purl pkg:gem/nokogiri@1.5
Tags Ghost
Next non-vulnerable version 1.19.1
Latest non-vulnerable version 1.19.1
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-gxbt-wyyf-1yg8
Aliases:
CVE-2013-6461
GHSA-jmhh-w7xp-wg39
OSV-101458
Nokogiri vulnerable to DoS while parsing XML entities Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
1.5.11
Affected by 53 other vulnerabilities.
1.6.1
Affected by 54 other vulnerabilities.
VCID-xvhw-5776-s3fr
Aliases:
CVE-2013-6460
GHSA-62qp-3fxm-9wxf
OSV-101179
Nokogiri vulnerable to DoS while parsing XML documents Nokogiri gem has Denial of Service via infinite loop when parsing XML documents
1.5.11
Affected by 53 other vulnerabilities.
1.6.1
Affected by 54 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:36:09.125192+00:00 GitLab Importer Affected by VCID-gxbt-wyyf-1yg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/CVE-2013-6461.yml 38.0.0
2026-04-02T12:36:08.519376+00:00 GitLab Importer Affected by VCID-xvhw-5776-s3fr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/CVE-2013-6460.yml 38.0.0