Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby-nokogiri | Aug 22, 2024 | Apr 11, 2022 |
| Amazon_linux | — | Upgrade rubygem18-nokogiriUpgrade rubygem-nokogiri | Jun 10, 2022 | Apr 11, 2022 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Curl | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Dyld | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Iomobileframebuffer | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Itunesstore | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Networking | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Photos | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Ppp | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Preferences | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Printing | — | — | Oct 14, 2024 | Apr 11, 2022 |
| Apple Osx Ruby | — | Upgrade macOS to the latest version | Jan 10, 2023 | Apr 11, 2022 |
| Centos_linux | — | Upgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauthUpgrade rubygem-jwtUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade rubygem-unf_extUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-fast_gettextUpgrade rubygem-foreman_maintainUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-rest-clientUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cliUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade python39-pulp_manifestUpgrade rubygem-gssapiUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintainUpgrade rubygem-mime-typesUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsource | Nov 17, 2022 | Apr 11, 2022 |
| Debian | — | Upgrade ruby-nokogiri | May 16, 2022 | Apr 11, 2022 |
| Gentoo Linux | — | Upgrade dev-ruby/nokogiri. | Aug 16, 2022 | Apr 11, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-highlineUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade rubygem-unf_extUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foremanUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-mime-types-dataUpgrade rubygem-mime-typesUpgrade satellite-cloneUpgrade rubygem-jwtUpgrade rubygem-unicode-debuginfoUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-loggingUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf | Nov 17, 2022 | Apr 11, 2022 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfo | Mar 12, 2024 | Apr 11, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-nokogiri-docUpgrade ruby2.5-rubygem-nokogiri-testsuiteUpgrade ruby2.5-rubygem-nokogiri | Nov 17, 2022 | Apr 11, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub