This repository has been archived by the owner on Feb 14, 2024. It is now read-only.

Nokogiri gem, via libxml, is affected by DoS vulnerabilities #9

Open

sniffler-app bot opened this issue Jun 9, 2023 · 0 comments

Labels

dependabot high security

sniffler-app bot commented Jun 9, 2023

Description

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

Informations

Manifest Path: Gemfile.lock

Please look at dependabot report: https://github.com/swipely/reinvent-demo/security/dependabot/31

sniffler-app bot added dependabot high security labels

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.