This CVE ID has been rejected as a duplicate.
Description
This CVE ID has been rejected as a duplicate.
Analysis
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Nokogiri | Nokogiri | 95% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Remediation
No vendor fix or workaround currently provided.
OpenCVE Recommended Actions
- Upgrade Nokogiri to version 1.13.5 or newer, which includes the libxml2 patch that removes the integer overflow.
- Configure XML processing within the application to enforce a maximum size limit or reject files that exceed a safe threshold, thereby preventing the creation of oversized XML payloads.
- Apply input validation rules that ensure any XML data is bounded in size and correctly handled by the parser, mitigating potential out‑of‑bounds write risks.
Generated by OpenCVE AI on August 28, 2026 at 18:59 UTC.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 08 Sep 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Nokogiri before 1.13.5 Integer Overflow via libxml2 | nokogiri: libxml2: Nokogiri: Integer overflow in libxml2 leads to information disclosure, data modification, or denial of service |
| Metrics |
ssvc
|
Tue, 08 Sep 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-119 | |
| CPEs | ||
| References |
|
|
| Metrics |
cvssV4_0
|
Tue, 08 Sep 2026 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information disclosure, data modification, or denial of service. | This CVE ID has been rejected as a duplicate. |
| CPEs | ||
| Metrics |
cvssV4_0
|
cvssV4_0
|
Tue, 01 Sep 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:nokogiri:nokogiri:*:*:*:*:*:ruby:*:* |
Fri, 28 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 27 Aug 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Tue, 25 Aug 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 25 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Nokogiri versions before 1.13.5 contain an integer overflow vulnerability in packaged libxml2 buffer handling functions that allows attackers to cause out-of-bounds memory writes. Attackers can exploit this by crafting multi-gigabyte XML files to trigger buffer overflows resulting in information disclosure, data modification, or denial of service. | |
| Title | Nokogiri before 1.13.5 Integer Overflow via libxml2 | |
| First Time appeared |
Nokogiri
Nokogiri nokogiri |
|
| Weaknesses | CWE-119 | |
| CPEs | cpe:2.3:a:nokogiri:nokogiri:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Nokogiri
Nokogiri nokogiri |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: REJECTED
Assigner: VulnCheck
Published:
Updated: 2026-09-08T14:57:43.948Z
Reserved: 2026-08-25T14:31:37.342Z
Link: CVE-2022-50999
Vulnrichment
Updated:
NVD
Status : Rejected
Published: 2026-08-25T16:16:44.240
Modified: 2026-09-08T15:17:59.460
Link: CVE-2022-50999
Redhat
OpenCVE Enrichment
Updated: 2026-08-28T19:00:11Z
Weaknesses
-
CWE-787
Out-of-bounds Write