Vendor
Sparklemotion
37 known vulnerabilities in products by Sparklemotion, 0 of them actively exploited (CISA KEV).
Key figures
37
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-29181 | Improper Handling of Unexpected Data Type in Nokogiri | 8.2 | |
| High | CVE-2022-24836 | Inefficient Regular Expression Complexity in Nokogiri | 7.5 | |
| High | CVE-2021-21289 | Command Injection Vulnerability in Mechanize | 7.4 | |
| High | CVE-2022-24839 | Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) | 7.5 | |
| High | CVE-2022-23476 | Unchecked return value from xmlTextReaderExpand in Nokogiri | 7.5 | |
| Critical | CVE-2022-51000 | Nokogiri before 1.13.2 Multiple Vulnerabilities via libxml2 libxslt | 9.8 | |
| Critical | CVE-2025-71407 | Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free | 9.8 | |
| High | CVE-2026-79770 | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer | 7.5 | |
| High | CVE-2021-41098 | Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby | 7.5 | |
| High | CVE-2021-47996 | Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 | 7.5 | |
| Medium | CVE-2026-107715 | Mechanize sends credential headers to another host after an HTTP redirect | 6.8 | |
| Critical | CVE-2024-58378 | Nokogiri before 1.16.2 Use-After-Free via xmlTextReader | 9.8 | |
| High | CVE-2022-31033 | Authorization header leak in rubygem Mechanize | 5.9 | |
| High | CVE-2022-50998 | Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2 | 7.5 | |
| High | CVE-2023-54354 | Nokogiri before 1.14.3 Null Pointer Dereference via libxml2 | 7.5 | |
| Medium | CVE-2026-107399 | Mechanize sends credential headers to another origin after a meta refresh | 6.8 | |
| High | CVE-2022-50999 | Nokogiri before 1.13.5 Integer Overflow via libxml2 | 8.6 | |
| High | CVE-2026-79769 | Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args | 5.5 | |
| High | CVE-2026-57236 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | 8.2 | |
| High | CVE-2026-57235 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | 8.2 | |
| High | CVE-2026-57435 | Sparklemotion Nokogiri: Use After Free | 7.5 | |
| High | CVE-2026-57434 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | 7.5 | |
| Medium | CVE-2026-79771 | Nokogiri before 1.19.3 Memory Leak via XSLT Transform | 5.3 | |
| High | CVE-2025-71346 | Nokogiri before 1.18.8 Heap Buffer Under-read via XML Schema | 2.5 | |
| High | CVE-2025-71406 | Nokogiri before 1.18.4 Use-After-Free via libxslt | 7.5 |