| Release | Version |
|---|---|
| jessie | 1.6.3.1+ds-1+deb8u3 |
| stretch | 1.6.8.1-1+deb9u2 |
| buster | 1.10.0+dfsg1-2+deb10u1 |
| bullseye | 1.11.1+dfsg-2 |
| bullseye (security) | 1.11.1+dfsg-2+deb11u1 |
| bookworm | 1.13.10+dfsg-2 |
| trixie | 1.16.4+dfsg-1 |
| sid | 1.16.4+dfsg-1 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-23476 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Nokogiri is an open source XML and HTML library for the Ruby programmi ... |
| CVE-2019-5477 | fixed | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | A command injection vulnerability in Nokogiri v1.10.3 and earlier allo ... |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-29181 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri pri ... |
| Bug | Description |
|---|---|
| CVE-2022-24836 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< ... |
| CVE-2021-41098 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers wit ... |
| CVE-2020-26247 | Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers wit ... |
| CVE-2013-6461 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by fai ... |
| CVE-2013-6460 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsin ... |
| CVE-2012-6685 | Nokogiri before 1.5.4 is vulnerable to XXE attacks |
| DSA / DLA | Description |
|---|---|
| DLA-3868-1 | ruby-nokogiri - security update |
| DLA-3149-1 | ruby-nokogiri - security update |
| DLA-3003-1 | ruby-nokogiri - security update |
| ELA-609-1 | ruby-nokogiri - security update |
| DLA-2678-1 | ruby-nokogiri - security update |
| ELA-438-1 | ruby-nokogiri - security update |
| DLA-1933-1 | ruby-nokogiri - security update |