sparklemotion

Top products

The 15 most recently published vulnerabilities affecting sparklemotion.

• CVE-2026-57438Nokogiri: Possible Use-After-Free in XInclude Processing6.6Jun 25, 2026
• CVE-2026-57437Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime5.3Jun 25, 2026
• CVE-2026-57436Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type5.3Jun 25, 2026
• CVE-2026-57435Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`7.5Jun 25, 2026
• CVE-2026-57434Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes7.5Jun 25, 2026
• CVE-2026-57235Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`8.2Jun 25, 2026
• CVE-2026-57234Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-262472.6Jun 25, 2026
• CVE-2026-57236Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception8.2Jun 25, 2026
• CVE-2025-6494sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow3.3Jun 22, 2025
• CVE-2025-6490sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow3.3Jun 22, 2025
• CVE-2022-23476Unchecked return value from xmlTextReaderExpand in Nokogiri7.5Dec 8, 2022
• CVE-2022-31033Authorization header leak in rubygem Mechanize5.9Jun 9, 2022
• CVE-2022-29181Improper Handling of Unexpected Data Type in Nokogiri8.2May 20, 2022
• CVE-2022-24839Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork)7.5Apr 11, 2022
• CVE-2022-24836Inefficient Regular Expression Complexity in Nokogiri7.5Apr 11, 2022