CVE-2017-16932

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Vulnerability Details

Score

7.5

Score Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Versions

nokogiri < 1.8.1

Severity

High

Ecosystem

RubyGems

Publish Date

May 12, 2022

Modified Date

February 20, 2024