CVE-2024-58377 - Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the xmllint tool where the issue occurs. - 漏洞详情

漏洞编号：CVE-2024-58377

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2024-58377

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-125

发布/更新时间：2026-08-25 / 2026-08-28

漏洞描述

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the xmllint tool where the issue occurs.

漏洞描述

相关链接

相关漏洞