Contents

---
gem: nokogiri
platform: jruby
cve: 2013-6460
osvdb: 101179
url: https://nvd.nist.gov/vuln/detail/CVE-2013-6460
title: |
  Nokogiri Gem for JRuby Crafted XML Document Handling Infinite Loop Remote DoS
date: 2013-12-14
description: |
  Nokogiri Gem for JRuby contains a flaw that may allow a remote denial of
  service. The issue is triggered when handling a specially crafted XML
  document, which can result in an infinite loop. This may allow a
  context-dependent attacker to crash the server.
cvss_v2: 4.3
patched_versions: 
  - "~> 1.5.11"
  - ">= 1.6.1"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/nokogiri/CVE-2013-6460.yml