Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-57434 →
DEBIAN-CVE-2026-57434
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain metho...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri contains a bug when calling certain methods on allocated-but-uninitialized native wrapper classes that inherit from Nokogiri::XML::Node. This caused a NULL pointer dereference that could crash the process. This vulnerability is fixed in 1.19.4.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ruby-nokogiri
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
ruby-nokogiri
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
ruby-nokogiri
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.4+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org