CVE-2022-24836
Inefficient Regular Expression Complexity in Nokogiri
Résumé
Inefficient Regular Expression Complexity in Nokogiri
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nokogiri is an open source XML and HTML library for Ruby. Nokogiri < v1.13.4 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri >= 1.13.4. There are no known workarounds for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-24836 ruby-nokogiri Corrigé dans: 1.11.1+dfsg-2+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory security.gentoo.org
- patch github.com
- web lists.debian.org
- web support.apple.com
- web seclists.org
- web lists.debian.org
- web lists.debian.org