Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/nokogiri@1.6.0.0a
purl pkg:gem/nokogiri@1.6.0.0a
Tags Ghost
Next non-vulnerable version 1.19.1
Latest non-vulnerable version 1.19.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2b1g-gp84-87e8
Aliases:
CVE-2015-7499
GHSA-jxjr-5h69-qw3w
Improper Restriction of Operations within the Bounds of a Memory Buffer Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
1.6.7.2
Affected by 47 other vulnerabilities.
1.6.8.rc1
Affected by 48 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:47:00.014302+00:00 GitLab Importer Affected by VCID-2b1g-gp84-87e8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/CVE-2015-7499.yml 38.0.0