Skip to content
This repository was archived by the owner on Feb 14, 2024. It is now read-only.
This repository was archived by the owner on Feb 14, 2024. It is now read-only.

Nokogiri gem, via libxml, is affected by DoS vulnerabilities #27

Open
Open
Nokogiri gem, via libxml, is affected by DoS vulnerabilities#27
Labels
dependabothighsecurity

Description

@sniffler-app
sniffler-app
bot
opened on Jun 9, 2023

Description

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Informations

Manifest Path: Gemfile.lock

Please look at dependabot report: https://github.com/swipely/bubz/security/dependabot/107

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependabothighsecurity

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions