-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nokogiri | rubygems | < 1.18.3 | 1.18.3 |
Miggo AIRoot Cause AnalysisThe vulnerabilities stem from libxml2's DTD error reporting and XML Schema validation logic. For CVE-2025-24928, the stack overflow occurs during error message formatting with long QName prefixes, pointing to functions in valid.c. For CVE-2024-56171, the use-after-free arises in schema validation with keyrefs and recursive types, implicating functions in xmlschemas.c. Confidence levels reflect direct alignment with described attack vectors and libxml2's known code structure, though exact function names are inferred without explicit commit diffs.
A Semantic Attack on Google Gemini - Read the Latest Research