Vulnerabilities > Nokogiri > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-08-16 | CVE-2019-5477 | OS Command Injection vulnerability in multiple products A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. | 9.8 |