-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability CVE-2024-34459 resides in libxml2's xmllint tool, specifically in its command-line argument handling. However, Nokogiri does not include or expose the xmllint tool in its codebase or functionality. The advisory explicitly states there is no impact to Nokogiri users because the vulnerable component (xmllint) is not part of Nokogiri's provided features. While libxml2 itself is a dependency, the specific vulnerable functions related to this CVE are isolated to xmllint, which Nokogiri does not utilize. Therefore, no vulnerable functions within Nokogiri's codebase or its exposed dependencies are identified for this specific issue.
RubyRuby| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nokogiri | rubygems | < 1.16.5 | 1.16.5 |
Ongoing coverage of React2Shell