Sparklemotion Nekohtml vulnerabilities

1 known vulnerability affecting sparklemotion/nekohtml.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-24839HIGHCVSS 7.5fixed in 1.9.22.noko22022-04-11

CVE-2022-24839 [HIGH] CWE-400 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) org.cyberneko.html is an html parser written in Java. The fork of `org.cyberneko.html` used by Nokogiri (Rubygem) raises a `java.lang.OutOfMemoryError` exception when parsing ill-formed HTML markup. Users are advised to upgrade to `>= 1.9.22.noko2`. Note: The upstream library `org.cyberneko.html` is no longer maintained. No