CVE-2013-6461 (nokogiri): CVE-2013-6461 rubygem-nokogiri: DoS while parsing XML entities

December 14th, 2013

ADVISORIES

GEM

SEVERITY

CVSS v3.x: 6.5 (Medium)

PATCHED VERSIONS

~> 1.5.11
>= 1.6.1

DESCRIPTION

Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits