https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:58:55.618726+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-24836 CVE-2022-24836 — Inefficient Regular Expression Complexity in Nokogiri 2026-09-28T19:58:55.622918+00:00

Affected: sparklemotion nokogiri

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.

 https://vulnerability.circl.lu/vuln/ghsa-crjr-9rc5-ghw8 GHSA-crjr-9rc5-ghw8 — Nokogiri Inefficient Regular Expression Complexity 2026-09-28T19:58:55.623021+00:00

Affected: RubyGems: nokogiri

## Summary

Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents.

## Mitigation

Upgrade to Nokogiri `>= 1.13.4`.

## Severity

The Nokogiri maintainers have evaluated this as [**High Severity** 7.5 (CVSS3.1)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

## References

[CWE-1333](https://cwe.mitre.org/data/definitions/1333.html) Inefficient Regular Expression Complexity

## Credit

This vulnerability was reported by HackerOne user ooooooo_q (ななおく).