tfm-ror52-rubygem-nokogiri vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the tfm-ror52-rubygem-nokogiri package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M XML External Entity (XXE) Injection	*
M Information Exposure Through Log Files	<0:1.8.4-2.el7sat
M Cross-site Scripting (XSS)	<0:1.8.4-2.el7sat
M Cross-site Scripting (XSS)	<0:1.8.4-2.el7sat
M Cross-site Scripting (XSS)	<0:1.8.4-2.el7sat
M Directory Traversal	<0:1.8.4-2.el7sat
M Incorrect Permission Assignment for Critical Resource	<0:1.8.4-2.el7sat
M Cleartext Storage of Sensitive Information	<0:1.8.4-2.el7sat
M Improper Authentication	<0:1.8.4-2.el7sat
H Improper Authorization	<0:1.8.4-2.el7sat
H Cleartext Transmission of Sensitive Information	<0:1.8.4-2.el7sat
H Improper Certificate Validation	<0:1.8.4-2.el7sat
M Cross-site Scripting (XSS)	<0:1.8.4-2.el7sat
L Inefficient Regular Expression Complexity	*
M Resource Exhaustion	<0:1.8.4-2.el7sat
L Allocation of Resources Without Limits or Throttling	*
M HTTP Response Splitting	<0:1.8.4-2.el7sat
M Arbitrary Argument Injection	<0:1.8.4-2.el7sat
M Improper Neutralization of Special Elements	<0:1.8.4-2.el7sat
H Deserialization of Untrusted Data	<0:1.8.4-2.el7sat
M CVE-2016-6346	<0:1.8.4-2.el7sat
M Improper Neutralization of Special Elements	<0:1.8.4-2.el7sat
H Deserialization of Untrusted Data	<0:1.8.4-2.el7sat