Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
ruby-nokogiri may execute malicious code from crafted files
published 4 days ago
Summary
The ruby-nokogiri package, which Ruby applications use to read and write XML and HTML, contains a security weakness. An attacker who can provide a specially crafted file could cause the program to run unintended code or crash. Update to the latest ruby-nokogiri version promptly and avoid processing untrusted files until the fix is applied.
What to do
- Update cleanstart ruby-nokogiri to version 1.13.10-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | ruby-nokogiri |
< 1.13.10-r0 Fix: upgrade to 1.13.10-r0
|
Original advisory text
Nokogiri is an open source XML and HTML library for the Ruby programming language
Security vulnerability affects the ruby-nokogiri package. Nokogiri is an open source XML and HTML library for the Ruby programming language.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-OG20837 · OSV
Track software like this
Free during beta