Sploitus

42 exploited vulnerabilities in Nokogiri

Vulnerabilities with publicly known exploits

Vendors
Astra Linux, Nokogiri, Rexical, Suse, Canonical, Rubygems
With known exploits
42
Affected Nokogiri versions
≤ 1.10.3, 1.13.6, 1.19.4, 1.13.4, 1.13.8, 1.13.9, 1.12.5, 1.5.4, 1.5.11, 1.6.1, 1.11.0
Affected Onelogin Ruby-saml versions
< 1.18.0
Affected Google Chrome versions
≤ 57.0.2987.75
Affected Xmlsoft libxml2 versions
< 2.9.11, 2.9.4
Affected Nekohtml Project Nekohtml versions
< 1.9.22.noko2
Affected Xmlsoft Libxslt versions
< 1.1.33
Affected Loofah Project Loofah versions
< 2.19.1
Affected Rubyonrails Rails Html Sanitizers versions
= 1.6.0

Vulnerabilities with exploits

Highest CVSS first — each links to the exploits we have indexed

CVE-2019-5477
CVSS 9.8 CRITICAL 2019-08-16FIX AVAILABLE
CVE-2025-71407
CVSS 9.8 CRITICAL 2025-02-18FIX AVAILABLE
CVE-2024-58378
CVSS 9.8 CRITICAL 2024-02-05FIX AVAILABLE
CVE-2022-51000
CVSS 9.8 CRITICAL 2022-02-25FIX AVAILABLE
CVE-2024-58377
2024-05-13FIX AVAILABLE
CVE-2025-66568
CVSS 9.3 CRITICAL 2025-12-09FIX AVAILABLE
CVE-2022-50999
CVSS 8.8 HIGH 2022-05-18FIX AVAILABLE
CVE-2017-5029
CVSS 8.8 HIGH 2017-03-09FIX AVAILABLE
CVE-2026-79770
2026-05-06FIX AVAILABLE
CVE-2026-79769
2026-08-25FIX AVAILABLE
CVE-2025-71406
CVSS 8.7 HIGH 2025-03-14FIX AVAILABLE
CVE-2025-71346
2025-04-21FIX AVAILABLE
CVE-2023-54354
CVSS 8.7 HIGH 2023-04-11FIX AVAILABLE
CVE-2022-50998
CVSS 8.7 HIGH 2022-10-18FIX AVAILABLE
CVE-2021-3517
CVSS 8.6 HIGH 2021-04-22FIX AVAILABLE
CVE-2022-29181
CVSS 8.2 HIGH 2022-05-20FIX AVAILABLE
CVE-2026-57236
CVSS 8.2 HIGH 2026-06-19FIX AVAILABLE
CVE-2026-57235
CVSS 8.2 HIGH 2026-06-19FIX AVAILABLE
CVE-2022-24839
CVSS 7.5 HIGH 2022-04-11FIX AVAILABLE
CVE-2022-24836
CVSS 7.5 HIGH 2022-04-10FIX AVAILABLE
CVE-2019-5815
CVSS 7.5 HIGH 2012-02-17FIX AVAILABLE
CVE-2019-18197
CVSS 7.5 HIGH 2019-10-18FIX AVAILABLE
CVE-2026-57435
CVSS 7.5 HIGH 2026-06-19FIX AVAILABLE
CVE-2026-57434
CVSS 7.5 HIGH 2026-06-19FIX AVAILABLE
CVE-2022-23516
CVSS 7.5 HIGH 2022-12-13FIX AVAILABLE
CVE-2022-23476
CVSS 7.5 HIGH 2022-12-08FIX AVAILABLE
CVE-2021-41098
CVSS 7.5 HIGH 2021-09-27FIX AVAILABLE
CVE-2012-6685
CVSS 7.5 HIGH 2020-02-19FIX AVAILABLE
CVE-2015-8806
CVSS 7.5 HIGH 2012-02-17
CVE-2026-79772
2026-02-18FIX AVAILABLE
CVE-2026-79771
2026-05-06FIX AVAILABLE
CVE-2026-57438
CVSS 6.6 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2013-6461
CVSS 6.5 MEDIUM 2019-11-05FIX AVAILABLE
CVE-2013-6460
CVSS 6.5 MEDIUM 2019-11-05
CVE-2024-53985
CVSS 6.1 MEDIUM 2024-12-02FIX AVAILABLE
CVE-2022-23515
CVSS 6.1 MEDIUM 2022-12-13FIX AVAILABLE
CVE-2026-57437
CVSS 6.3 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2026-57436
CVSS 6.3 MEDIUM 2026-06-19FIX AVAILABLE
CVE-2020-26247
CVSS 4.3 MEDIUM 2020-12-30FIX AVAILABLE
CVE-2025-6494
CVSS 4.8 MEDIUM 2025-06-22FIX AVAILABLE
CVE-2025-6490
CVSS 4.8 MEDIUM 2025-01-01FIX AVAILABLE
CVE-2026-57234
CVSS 2.6 LOW 2026-06-19FIX AVAILABLE