Ssparklemotion

Products

Exploited and recent CVEs

• CVE-2026-107715 Medium 6.8 Mechanize sends credential headers to another host after an HTTP redirect 0.5%
• CVE-2026-107714 Medium 5.9 Mechanize sends credential headers to a different scheme or port after a redirect 0.2%
• CVE-2026-107399 Medium 6.8 Mechanize sends credential headers to another origin after a meta refresh 0.4%
• CVE-2026-79772 Medium 5.3 Nokogiri before 1.19.1 Unchecked Return Value canonicalize 0.3%
• CVE-2026-79771 Medium 5.3 Nokogiri before 1.19.3 Memory Leak via XSLT Transform 0.4%
• CVE-2026-79770 High 7.5 Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer 0.5%
• CVE-2026-79769 Medium 5.5 Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args 0.3%
• CVE-2026-54620 Low 2.0 sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks 0.1%
• CVE-2026-54619 Low 2.0 sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity 0.1%
• CVE-2026-57438 Low 2.2 Nokogiri: Possible Use-After-Free in XInclude Processing 0.1%
• CVE-2026-57437 Low 1.7 Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime 0.4%
• CVE-2026-57436 Low 1.7 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type 0.4%
• CVE-2026-57435 Low 1.7 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` 0.5%
• CVE-2026-57434 Low 1.7 Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes 0.5%
• CVE-2026-57235 Medium 6.3 Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` 0.4%
• CVE-2026-57234 Low 2.6 Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 0.2%
• CVE-2026-57236 Low 1.7 Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception 0.4%
• CVE-2025-6494 Low 3.3 sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow 0.2%
• CVE-2025-6490 Low 3.3 sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow 0.2%
• CVE-2022-23476 High 7.5 Unchecked return value from xmlTextReaderExpand in Nokogiri 1.8%
• CVE-2022-31033 Medium 5.9 Authorization header leak in rubygem Mechanize 1.5%
• CVE-2022-29181 High 8.2 Improper Handling of Unexpected Data Type in Nokogiri 3.2%
• CVE-2022-24839 High 7.5 Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) 2.2%
• CVE-2022-24836 High 7.5 Inefficient Regular Expression Complexity in Nokogiri 3.5%
• CVE-2021-41098 High 7.5 Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby 1.5%
• CVE-2021-21289 High 7.4 Command Injection Vulnerability in Mechanize 3.5%
• CVE-2020-26247 Low 2.6 XXE in Nokogiri 1.2%