Search for packages
Package details: pkg:gem/nokogiri@1.16.3
purl pkg:gem/nokogiri@1.16.3
Next non-vulnerable version 1.18.8
Latest non-vulnerable version 1.18.8
Risk 4.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-7ytf-hshe-aaaa
Aliases:
GHSA-r95h-9x8f-r3f7
Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
1.16.5
Affected by 4 other vulnerabilities.
VCID-adp7-tpp1-8qbn
Aliases:
GHSA-vvfq-8hwr-qm4m
Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 ## Summary Nokogiri v1.18.3 upgrades its dependency libxml2 to [v2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6). libxml2 v2.13.6 addresses: - CVE-2025-24928 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 - CVE-2024-56171 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/828 ## Impact ### CVE-2025-24928 Stack-buffer overflow is possible when reporting DTD validation errors if the input contains a long (~3kb) QName prefix. ### CVE-2024-56171 Use-after-free is possible during validation against untrusted XML Schemas (.xsd) and, potentially, validation of untrusted documents against trusted Schemas if they make use of `xsd:keyref` in combination with recursively defined types that have additional identity constraints.
1.18.3
Affected by 2 other vulnerabilities.
VCID-dwdk-kk6d-43b2
Aliases:
GHSA-5w6v-399v-w3cc
Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415
1.18.8
Affected by 0 other vulnerabilities.
VCID-n1r2-jqwt-jucp
Aliases:
GHSA-5mwf-688x-mr7x
Duplicate Advisory: Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 Nokogiri v1.18.3 upgrades its dependency libxml2 to [v2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6). libxml2 v2.13.6 addresses: - CVE-2025-24928 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 - CVE-2024-56171 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/828
1.18.3
Affected by 2 other vulnerabilities.
VCID-psj6-phjv-a7bb
Aliases:
GHSA-mrxw-mxhj-p664
Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs ## Summary Nokogiri v1.18.4 upgrades its dependency libxslt to [v1.1.43](https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.43). libxslt v1.1.43 resolves: - CVE-2025-24855: Fix use-after-free of XPath context node - CVE-2024-55549: Fix UAF related to excluded namespaces ## Impact ### CVE-2025-24855 - "Use-after-free due to xsltEvalXPathStringNs leaking xpathCtxt->node" - MITRE has rated this 7.8 High CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H - Upstream report: https://gitlab.gnome.org/GNOME/libxslt/-/issues/128 - NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2025-24855 ### CVE-2024-55549 - "Use-after-free related to excluded result prefixes" - MITRE has rated this 7.8 High CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H - Upstream report: https://gitlab.gnome.org/GNOME/libxslt/-/issues/127 - NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2024-55549
1.18.4
Affected by 1 other vulnerability.
VCID-rc6j-z37r-aaaq
Aliases:
GHSA-r3w4-36x6-7r99
Duplicate Advisory: Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
1.16.5
Affected by 4 other vulnerabilities.
VCID-u9nd-yvuf-aaas
Aliases:
GHSA-vcc3-rw6f-jv97
Use-after-free in libxml2 via Nokogiri::XML::Reader There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:20:21.331403+00:00 GitLab Importer Affected by VCID-dwdk-kk6d-43b2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.3
2025-06-20T17:18:00.397352+00:00 GitLab Importer Affected by VCID-psj6-phjv-a7bb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-mrxw-mxhj-p664.yml 36.1.3
2025-06-20T17:16:48.451692+00:00 GitLab Importer Affected by VCID-n1r2-jqwt-jucp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5mwf-688x-mr7x.yml 36.1.3
2025-06-20T17:16:44.864412+00:00 GitLab Importer Affected by VCID-adp7-tpp1-8qbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.3
2025-06-20T16:58:33.033578+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 36.1.3
2025-06-20T16:58:11.492822+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.3
2025-06-20T13:44:31.401113+00:00 Ruby Importer Affected by VCID-dwdk-kk6d-43b2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.3
2025-06-20T13:44:26.582296+00:00 Ruby Importer Affected by VCID-adp7-tpp1-8qbn https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.3
2025-06-20T13:43:34.963868+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.3
2025-06-20T13:43:30.382053+00:00 Ruby Importer Affected by VCID-u9nd-yvuf-aaas https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vcc3-rw6f-jv97.yml 36.1.3
2025-06-03T23:55:18.741778+00:00 GitLab Importer Affected by VCID-dwdk-kk6d-43b2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.0
2025-06-03T23:53:03.992907+00:00 GitLab Importer Affected by VCID-psj6-phjv-a7bb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-mrxw-mxhj-p664.yml 36.1.0
2025-06-03T23:51:59.210444+00:00 GitLab Importer Affected by VCID-n1r2-jqwt-jucp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5mwf-688x-mr7x.yml 36.1.0
2025-06-03T23:51:56.752785+00:00 GitLab Importer Affected by VCID-adp7-tpp1-8qbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.0
2025-06-03T23:35:11.544747+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 36.1.0
2025-06-03T23:34:50.586486+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.0
2025-06-03T20:27:59.081704+00:00 Ruby Importer Affected by VCID-dwdk-kk6d-43b2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.0
2025-06-03T20:27:54.326638+00:00 Ruby Importer Affected by VCID-adp7-tpp1-8qbn https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.0
2025-06-03T20:27:09.225801+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.0
2025-06-03T20:27:03.941581+00:00 Ruby Importer Affected by VCID-u9nd-yvuf-aaas https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vcc3-rw6f-jv97.yml 36.1.0
2025-06-02T23:54:10.695267+00:00 GitLab Importer Affected by VCID-dwdk-kk6d-43b2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.2
2025-06-02T23:51:53.792764+00:00 GitLab Importer Affected by VCID-psj6-phjv-a7bb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-mrxw-mxhj-p664.yml 36.1.2
2025-06-02T23:50:47.564268+00:00 GitLab Importer Affected by VCID-n1r2-jqwt-jucp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5mwf-688x-mr7x.yml 36.1.2
2025-06-02T23:50:45.595265+00:00 GitLab Importer Affected by VCID-adp7-tpp1-8qbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.2
2025-06-02T23:33:10.858143+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 36.1.2
2025-06-02T23:32:50.642267+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.2
2025-06-02T20:16:59.444885+00:00 Ruby Importer Affected by VCID-dwdk-kk6d-43b2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.1.2
2025-06-02T20:16:53.867025+00:00 Ruby Importer Affected by VCID-adp7-tpp1-8qbn https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.1.2
2025-06-02T20:16:00.784905+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.1.2
2025-06-02T20:15:55.735343+00:00 Ruby Importer Affected by VCID-u9nd-yvuf-aaas https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vcc3-rw6f-jv97.yml 36.1.2
2025-05-23T20:13:52.661370+00:00 Ruby Importer Affected by VCID-u9nd-yvuf-aaas https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vcc3-rw6f-jv97.yml 36.0.0
2025-05-22T23:31:24.319018+00:00 GitLab Importer Affected by VCID-dwdk-kk6d-43b2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.0.0
2025-04-28T13:03:50.127994+00:00 Ruby Importer Affected by VCID-dwdk-kk6d-43b2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-5w6v-399v-w3cc.yml 36.0.0
2025-04-21T23:18:30.971187+00:00 GitLab Importer Affected by VCID-psj6-phjv-a7bb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-mrxw-mxhj-p664.yml 36.0.0
2025-04-15T18:45:00.643562+00:00 Ruby Importer Affected by VCID-adp7-tpp1-8qbn https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.0.0
2025-04-15T18:42:45.822817+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.0.0
2025-04-03T22:42:12.731542+00:00 GitLab Importer Affected by VCID-n1r2-jqwt-jucp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-5mwf-688x-mr7x.yml 36.0.0
2025-04-03T22:42:06.943072+00:00 GitLab Importer Affected by VCID-adp7-tpp1-8qbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-vvfq-8hwr-qm4m.yml 36.0.0
2025-04-03T22:06:14.650167+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 36.0.0
2025-04-03T22:05:41.783519+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 36.0.0
2025-02-18T01:14:27.828845+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 35.1.0
2025-02-18T01:14:15.558668+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 35.1.0
2024-11-20T23:35:28.286187+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 35.0.0
2024-11-20T23:35:21.494988+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 35.0.0
2024-11-18T23:24:18.063361+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 34.3.2
2024-11-18T23:24:10.195827+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 34.3.2
2024-10-15T17:25:07.425322+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 34.0.2
2024-10-08T00:20:52.684757+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 34.0.2
2024-10-08T00:20:46.084158+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 34.0.2
2024-10-07T16:28:43.840407+00:00 GHSA Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/advisories/GHSA-r95h-9x8f-r3f7 34.0.2
2024-10-07T16:28:20.302277+00:00 GHSA Importer Affected by VCID-rc6j-z37r-aaaq https://github.com/advisories/GHSA-r3w4-36x6-7r99 34.0.2
2024-09-23T00:34:43.719336+00:00 GitLab Importer Affected by VCID-7ytf-hshe-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r95h-9x8f-r3f7.yml 34.0.1
2024-09-23T00:34:37.041522+00:00 GitLab Importer Affected by VCID-rc6j-z37r-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/nokogiri/GHSA-r3w4-36x6-7r99.yml 34.0.1
2024-09-22T16:51:54.968392+00:00 GHSA Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/advisories/GHSA-r95h-9x8f-r3f7 34.0.1
2024-09-22T16:51:33.241558+00:00 GHSA Importer Affected by VCID-rc6j-z37r-aaaq https://github.com/advisories/GHSA-r3w4-36x6-7r99 34.0.1
2024-09-21T15:49:54.210215+00:00 Ruby Importer Affected by VCID-7ytf-hshe-aaaa https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-r95h-9x8f-r3f7.yml 34.0.1