GHSA-5v8h-3h3q-446p

Summary

Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Severity

low

Published

2026-06-19

References

• https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-5v8h-3h3q-446p
• https://github.com/sparklemotion/nokogiri

Related advisories

• GHSA-353f-x4gh-cqq8 — critical · RubyGems/nokogiri
• CVE-2019-11068 — critical · RubyGems/nokogiri
• CVE-2019-5477 — critical · RubyGems/nokogiri
• GHSA-c4rq-3m3g-8wgx — high · RubyGems/nokogiri
• GHSA-mrxw-mxhj-p664 — high · RubyGems/nokogiri
• CVE-2022-23476 — high · RubyGems/nokogiri
• CVE-2021-30560 — high · RubyGems/nokogiri
• CVE-2021-3517 — high · RubyGems/nokogiri

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity