CVE-2022-24836
Inefficient Regular Expression Complexity in Nokogiri
Summary
Inefficient Regular Expression Complexity in Nokogiri
Original description
The description as published by the source.
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri < v1.13.4 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri >= 1.13.4. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-24836 ruby-nokogiri Fixed in: 1.11.1+dfsg-2+deb11u1
References
- advisory github.com
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.gentoo.org
- patch github.com
- web lists.debian.org
- web support.apple.com
- web seclists.org
- web lists.debian.org
- web lists.debian.org