New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Nokogiri gem, via libxml, is affected by DoS vulnerabilities #10

Open

sniffler-app bot opened this issue Jun 13, 2023 · 0 comments

Labels

dependabot high security

sniffler-app bot commented Jun 13, 2023

Description

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Informations

Manifest Path: Gemfile.lock

Please look at dependabot report: https://github.com/swipely/rolodecks/security/dependabot/109

sniffler-app bot added dependabot high security labels

# for free to join this conversation on GitHub. Already have an account? # to comment