GHSA-p67v-3w7g-wjg7

Summary

Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Severity

low

Published

2026-06-19

References

• https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-p67v-3w7g-wjg7
• https://github.com/sparklemotion/nokogiri

Related advisories

• GHSA-353f-x4gh-cqq8 — critical · RubyGems/nokogiri
• CVE-2019-11068 — critical · RubyGems/nokogiri
• CVE-2019-5477 — critical · RubyGems/nokogiri
• GHSA-c4rq-3m3g-8wgx — high · RubyGems/nokogiri
• GHSA-mrxw-mxhj-p664 — high · RubyGems/nokogiri
• CVE-2022-23476 — high · RubyGems/nokogiri
• CVE-2021-30560 — high · RubyGems/nokogiri
• CVE-2021-3517 — high · RubyGems/nokogiri

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity