https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:06:32.576320+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06047 bdu:2022-06047 2026-10-03T09:06:32.819395+00:00 bdu:2022-06047 https://cve.radiocsirt.org/vuln/bell-cve-2022-24836 Withdrawn: BELL-CVE-2022-24836 — CVE-2022-24836 does not affect BellSoft software 2026-10-03T09:06:32.819435+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-mikutter-cve-2022-24836 BREW-mikutter-CVE-2022-24836 — Nokogiri Inefficient Regular Expression Complexity 2026-10-03T09:06:32.819454+00:00

Affected: Homebrew: mikutter

## Summary

Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents.

## Mitigation

Upgrade to Nokogiri `>= 1.13.4`.

## Severity

The Nokogiri maintainers have evaluated this as [**High Severity** 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

## References

[CWE-1333](https://cwe.mitre.org/data/definitions/1333.html) Inefficient Regular Expression Complexity

## Credit

This vulnerability was reported by HackerOne user ooooooo_q (ななおく).

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1108 certfr-2022-avi-1108 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T09:06:32.819498+00:00 certfr-2022-avi-1108 https://cve.radiocsirt.org/vuln/euvd-2026-160953 EUVD-2026-160953 2026-10-03T09:06:32.819514+00:00 EUVD-2026-160953 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24836 fkie_cve-2022-24836 2026-10-03T09:06:32.819526+00:00

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-crjr-9rc5-ghw8 GHSA-crjr-9rc5-ghw8 — Nokogiri Inefficient Regular Expression Complexity 2026-10-03T09:06:32.819547+00:00

Affected: RubyGems: nokogiri

## Summary

Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents.

## Mitigation

Upgrade to Nokogiri `>= 1.13.4`.

## Severity

The Nokogiri maintainers have evaluated this as [**High Severity** 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

## References

[CWE-1333](https://cwe.mitre.org/data/definitions/1333.html) Inefficient Regular Expression Complexity

## Credit

This vulnerability was reported by HackerOne user ooooooo_q (ななおく).

 https://cve.radiocsirt.org/vuln/gsd-2022-24836 gsd-2022-24836 2026-10-03T09:06:32.819578+00:00 gsd-2022-24836 https://cve.radiocsirt.org/vuln/oesa-2022-1644 OESA-2022-1644 — rubygem-nokogiri security update 2026-10-03T09:06:32.819590+00:00

Affected: openEuler:20.03-LTS-SP1: rubygem-nokogiri, openEuler:20.03-LTS-SP3: rubygem-nokogiri, openEuler:22.03-LTS: rubygem-nokogiri

Nokogiri parses and searches XML/HTML very quickly, and also has correctly implemented CSS3 selector support as well as XPath support. Nokogiri also features an Hpricot compatibility layer to help ease the change to using correct CSS and XPath.

Security Fix(es):

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri less than v1.13.4 contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri >= 1.13.4. There are no known workarounds for this issue.(CVE-2022-24836)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11999-1 openSUSE-SU-2024:11999-1 — ruby3.1-rubygem-nokogiri-1.13.4-1.1 on GA media 2026-10-03T09:06:32.819617+00:00

ruby3.1-rubygem-nokogiri-1.13.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:8506 RHSA-2022:8506 — Red Hat Security Advisory: Satellite 6.12 Release 2026-10-03T09:06:32.819635+00:00

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via '{% debug %}' template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API

 https://cve.radiocsirt.org/vuln/suse-su-2022:3890-1 SUSE-SU-2022:3890-1 — Security update for rubygem-nokogiri 2026-10-03T09:06:32.819670+00:00

Security update for rubygem-nokogiri

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24836 UBUNTU-CVE-2022-24836 2026-10-03T09:06:32.819686+00:00

Affected: Ubuntu:Pro:14.04:LTS: ruby-nokogiri, Ubuntu:16.04:LTS: ruby-nokogiri, Ubuntu:18.04:LTS: ruby-nokogiri, Ubuntu:Pro:20.04:LTS: ruby-nokogiri, Ubuntu:Pro:22.04:LTS: ruby-nokogiri

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2313 WID-SEC-W-2022-2313 — Apple macOS: Mehrere Schwachstellen 2026-10-03T09:06:32.819711+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um den Benutzer zu täuschen, Informationen offenzulegen, Sicherheitsmechanismen zu umgehen, Rechte zu erweitern und beliebigen Code mit Kernel-Rechten auszuführen.