debian/nekohtml vulnerabilities

Latest debian/nekohtml CVEs

Newest publication first

1. CVE-2022-24839 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)

   Published 2022-04-11

   High·CVSS 7.5 EPSS 2.2%

   org.cyberneko.html is an html parser written in Java. The fork of org.cyberneko.html used by Nokogiri (Rubygem) raises a java.lang.OutOfMemoryError exception when parsing ill-formed HTML markup. Users are advised to upgrade to >= 1.9.22.noko2. Note: The upstream library org.cyber...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.