https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:54:56.091466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-79769 BELL-CVE-2026-79769 2026-10-02T16:54:56.204335+00:00

Affected: Alpaquita:23: ruby-nokogiri, Alpaquita:25: ruby-nokogiri, Alpaquita:stream: ruby-nokogiri

 https://cve.radiocsirt.org/vuln/euvd-2026-359336 EUVD-2026-359336 2026-10-02T16:54:56.204396+00:00 EUVD-2026-359336 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79769 fkie_cve-2026-79769 2026-10-02T16:54:56.204412+00:00

Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a non-Node argument (e.g., a Namespace), it reads an xmlNs out of bounds, crashing the process. This is only triggerable by a programming error and cannot be triggered by untrusted input or normal use of the public API. Only CRuby is affected. Version 1.19.4 adds a type check and raises TypeError.

 https://cve.radiocsirt.org/vuln/ghsa-58vh-2xxg-v7j2 GHSA-58vh-2xxg-v7j2 2026-10-02T16:54:56.204443+00:00

Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a non-Node argument (e.g., a Namespace), it reads an xmlNs out of bounds, crashing the process. This is only triggerable by a programming error and cannot be triggered by untrusted input or normal use of the public API. Only CRuby is affected. Version 1.19.4 adds a type check and raises TypeError.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-79769 UBUNTU-CVE-2026-79769 2026-10-02T16:54:56.204461+00:00

Affected: Ubuntu:Pro:14.04:LTS: ruby-nokogiri, Ubuntu:16.04:LTS: ruby-nokogiri, Ubuntu:18.04:LTS: ruby-nokogiri, Ubuntu:Pro:20.04:LTS: ruby-nokogiri, Ubuntu:Pro:22.04:LTS: ruby-nokogiri, Ubuntu:24.04:LTS: ruby-nokogiri, Ubuntu:26.04:LTS: ruby-nokogiri

Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a non-Node argument (e.g., a Namespace), it reads an xmlNs out of bounds, crashing the process. This is only triggerable by a programming error and cannot be triggered by untrusted input or normal use of the public API. Only CRuby is affected. Version 1.19.4 adds a type check and raises TypeError.