Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/nokogiri@2.9.4
purl pkg:gem/nokogiri@2.9.4
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zm21-2pqq-3ker
Aliases:
CVE-2017-9050
GHSA-8c56-cpmw-89x7
Out-of-bounds Read libxml2 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:47:14.632483+00:00 GitLab Importer Affected by VCID-zm21-2pqq-3ker https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/CVE-2017-9050.yml 38.0.0