Skip to content

update nokogiri to >= 1.19.5 #3076

Closed
Closed

Description

@davidmillen50

Github CI is failing related to nokogiri as below

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-3w22-6jfg-527w
Criticality: Unknown
URL: GHSA-3w22-6jfg-527w
Title: Use-After-Free in Nokogiri when replacing an attribute value
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-4p39-36wj-23h4
Criticality: Unknown
URL: GHSA-4p39-36wj-23h4
Title: Possible Mutation XSS when serializing noscript content in Nokogiri::HTML5 documents
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-v995-44v6-5fqm
Criticality: Low
URL: GHSA-v995-44v6-5fqm
Title: Possible SSRF on JRuby when resolving external DTDs or entities with NONET set
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-3w22-6jfg-527w
Criticality: Unknown
URL: GHSA-3w22-6jfg-527w
Title: Use-After-Free in Nokogiri when replacing an attribute value
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-4p39-36wj-23h4
Criticality: Unknown
URL: GHSA-4p39-36wj-23h4
Title: Possible Mutation XSS when serializing noscript content in Nokogiri::HTML5 documents
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-v995-44v6-5fqm
Criticality: Low
URL: GHSA-v995-44v6-5fqm
Title: Possible SSRF on JRuby when resolving external DTDs or entities with NONET set
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-3w22-6jfg-527w
Criticality: Unknown
URL: GHSA-3w22-6jfg-527w
Title: Use-After-Free in Nokogiri when replacing an attribute value
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-4p39-36wj-23h4
Criticality: Unknown
URL: GHSA-4p39-36wj-23h4
Title: Possible Mutation XSS when serializing noscript content in Nokogiri::HTML5 documents
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-v995-44v6-5fqm
Criticality: Low
URL: GHSA-v995-44v6-5fqm
Title: Possible SSRF on JRuby when resolving external DTDs or entities with NONET set
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-3w22-6jfg-527w
Criticality: Unknown
URL: GHSA-3w22-6jfg-527w
Title: Use-After-Free in Nokogiri when replacing an attribute value
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-4p39-36wj-23h4
Criticality: Unknown
URL: GHSA-4p39-36wj-23h4
Title: Possible Mutation XSS when serializing noscript content in Nokogiri::HTML5 documents
Solution: update to '>= 1.19.5'

Name: nokogiri
Version: 1.19.4
GHSA: GHSA-v995-44v6-5fqm
Criticality: Low
URL: GHSA-v995-44v6-5fqm
Title: Possible SSRF on JRuby when resolving external DTDs or entities with NONET set
Solution: update to '>= 1.19.5'

Activity

  1. davidmillen50 commented on Nov 2, 2026

    @davidmillen50
    ContributorAuthor
  2. mroderick commented on Nov 2, 2026

    @mroderick
    Collaborator

    This has been fixed with #3078

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions