CVE-2024-58377

Published: Ago 25, 2026 Last Modified: Ago 25, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the xmllint tool where the issue occurs.

427

Uncontrolled Search Path Element

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
All platforms may be affected
View CWE Details
https://github.com/sparklemotion/nokogiri/commit/2876ac53
https://github.com/sparklemotion/nokogiri/commit/2876ac53
https://github.com/sparklemotion/nokogiri/security/advisori…
https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-r95h-9x8f-r3…
https://www.vulncheck.com/advisories/nokogiri-before-libxml…
https://www.vulncheck.com/advisories/nokogiri-before-libxml2-dependency-update