https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:33:41.912366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02313 bdu:2024-02313 2026-10-03T09:33:42.103980+00:00 bdu:2024-02313 https://cve.radiocsirt.org/vuln/bell-cve-2022-29181 Withdrawn: BELL-CVE-2022-29181 — CVE-2022-29181 does not affect BellSoft software 2026-10-03T09:33:42.104032+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/brew-mikutter-cve-2022-29181 BREW-mikutter-CVE-2022-29181 — Nokogiri Improperly Handles Unexpected Data Type 2026-10-03T09:33:42.104060+00:00

Affected: Homebrew: mikutter

### Summary

Nokogiri `< v1.13.6` does not type-check all inputs into the XML and HTML4 SAX parsers. For CRuby users, this may allow specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory.

### Severity

The Nokogiri maintainers have evaluated this as **High 8.2** (CVSS3.1).

### Mitigation

CRuby users should upgrade to Nokogiri `>= 1.13.6`.

JRuby users are not affected.

### Workarounds

To avoid this vulnerability in affected applications, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.

### Credit

This vulnerability was responsibly reported by @agustingianni and the Github Security Lab.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1108 certfr-2022-avi-1108 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T09:33:42.104130+00:00 certfr-2022-avi-1108 https://cve.radiocsirt.org/vuln/euvd-2026-241322 EUVD-2026-241322 2026-10-03T09:33:42.104150+00:00 EUVD-2026-241322 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29181 fkie_cve-2022-29181 2026-10-03T09:33:42.104162+00:00

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.

 https://cve.radiocsirt.org/vuln/ghsa-xh29-r2w5-wx8m GHSA-xh29-r2w5-wx8m — Nokogiri Improperly Handles Unexpected Data Type 2026-10-03T09:33:42.104185+00:00

Affected: RubyGems: nokogiri

### Summary

Nokogiri `< v1.13.6` does not type-check all inputs into the XML and HTML4 SAX parsers. For CRuby users, this may allow specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory.

### Severity

The Nokogiri maintainers have evaluated this as **High 8.2** (CVSS3.1).

### Mitigation

CRuby users should upgrade to Nokogiri `>= 1.13.6`.

JRuby users are not affected.

### Workarounds

To avoid this vulnerability in affected applications, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.

### Credit

This vulnerability was responsibly reported by @agustingianni and the Github Security Lab.

 https://cve.radiocsirt.org/vuln/gsd-2022-29181 gsd-2022-29181 2026-10-03T09:33:42.104214+00:00 gsd-2022-29181 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12085-1 openSUSE-SU-2024:12085-1 — ruby3.1-rubygem-nokogiri-1.13.6-1.1 on GA media 2026-10-03T09:33:42.104225+00:00

ruby3.1-rubygem-nokogiri-1.13.6-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:8506 RHSA-2022:8506 — Red Hat Security Advisory: Satellite 6.12 Release 2026-10-03T09:33:42.104242+00:00

netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via '{% debug %}' template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API

 https://cve.radiocsirt.org/vuln/suse-su-2022:3890-1 SUSE-SU-2022:3890-1 — Security update for rubygem-nokogiri 2026-10-03T09:33:42.104274+00:00

Security update for rubygem-nokogiri

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29181 UBUNTU-CVE-2022-29181 2026-10-03T09:33:42.104289+00:00

Affected: Ubuntu:Pro:20.04:LTS: ruby-nokogiri, Ubuntu:Pro:22.04:LTS: ruby-nokogiri

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors (segfault) or reads from unrelated memory. Version 1.13.6 contains a patch for this issue. As a workaround, ensure the untrusted input is a `String` by calling `#to_s` or equivalent.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1935 WID-SEC-W-2022-1935 — Microsoft GitHub Enterprise: Mehrere Schwachstellen 2026-10-03T09:33:42.104310+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft GitHub Enterprise ausnutzen, um Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.