~ / search / GHSA-jc36-42cf-vqwj

GHSA-jc36-42cf-vqwj

Nokogiri affected by zlib's Out-of-bounds Write vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2018-25032

Packages

EcosystemPackageAffectedFixed in
RubyGems nokogiri < 1.13.4 1.13.4

Details

As written in the advisory (Markdown source, shown as plain text).

zlib 1.2.11 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

References

External links from the advisory. They lead to third-party sites.