https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T21:36:25.097818+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-4658 CVE-2016-4658 2026-10-03T21:36:25.120220+00:00

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.

 https://vulnerability.circl.lu/vuln/ghsa-fr52-4hqw-p27f GHSA-fr52-4hqw-p27f — Nokogiri does not forbid namespace nodes in XPointer ranges 2026-10-03T21:36:25.120338+00:00

Affected: RubyGems: nokogiri

xpointer.c in libxml2 before 2.9.5 (as used in nokogiri before 1.7.1 amongst other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.