Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:47:14 +0000 CVE-2019-18197 https://vulnerability.circl.lu/vuln/cve-2019-18197 <p>In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn&#39;t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.</p> <p>In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn&#39;t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.</p> https://vulnerability.circl.lu/vuln/cve-2019-18197 GHSA-242x-7cm6-4w8j — Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability https://vulnerability.circl.lu/vuln/ghsa-242x-7cm6-4w8j <p><strong>Affected:</strong> RubyGems: nokogiri</p> <p>In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn&#39;t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.</p> <p>Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.</p> <p><strong>Affected:</strong> RubyGems: nokogiri</p> <p>In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn&#39;t reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed.</p> <p>Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue.</p> https://vulnerability.circl.lu/vuln/ghsa-242x-7cm6-4w8j