Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ruby-nokogiri | Aug 22, 2024 | May 20, 2022 |
| Amazon_linux | — | Upgrade rubygem-nokogiri | Dec 10, 2022 | May 20, 2022 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Amd | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Bluetooth | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Bootcamp | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Curl | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Driverkit | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Dyld | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Icloudphotolibrary | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Iohidfamily | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Iomobileframebuffer | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Itunesstore | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Networking | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Photos | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Ppp | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Preferences | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Printing | — | — | Oct 14, 2024 | May 20, 2022 |
| Apple Osx Ruby | — | Upgrade macOS to the latest version | Jan 10, 2023 | Dec 13, 2022 |
| Centos_linux | — | Upgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-highlineUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade rubygem-gssapiUpgrade rubygem-unf_extUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-little-pluggerUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_katelloUpgrade satellite-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-ffiUpgrade rubygem-domain_nameUpgrade rubygem-jwt | Sep 25, 2023 | May 20, 2022 |
| Debian | — | Upgrade ruby-nokogiri | Jul 30, 2024 | May 20, 2022 |
| Gentoo Linux | — | Upgrade dev-ruby/nokogiri. | Aug 16, 2022 | May 20, 2022 |
| Redhat_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-fast_gettextUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-gssapiUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade rubygem-unicodeUpgrade rubygem-domain_nameUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-typesUpgrade satellite-cliUpgrade rubygem-netrcUpgrade satellite-cloneUpgrade rubygem-ffiUpgrade rubygem-ffi-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade foreman-cliUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unfUpgrade python39-pulp_manifestUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_virt_who_configure | Sep 25, 2023 | May 20, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-nokogiriUpgrade ruby2.5-rubygem-nokogiri-docUpgrade ruby2.5-rubygem-nokogiri-testsuite | Nov 17, 2022 | May 20, 2022 |
| Ubuntu | — | Upgrade ruby-nokogiri (Ubuntu Pro) | Jun 26, 2025 | May 20, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 20, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub