{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3oapplemac_os_x10.15.7security_update_2021-006/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","cpe:2.3:a:xmlsoft:libxslt:*:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*","cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*","cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*","cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*","cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2021-30560"},{"cvss":7.5,"id":"CVE-2022-23308"},{"cvss":9.8,"id":"CVE-2022-51000"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Nokogiri","Nokogiri (\u003c 1.18.4)","libxslt (\u003c 1.1.43)"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","memory-corruption","libxslt","nokogiri"],"_cs_type":"advisory","_cs_vendors":["Nokogiri"],"content_html":"\u003cp\u003eNokogiri versions prior to 1.13.2 (CRuby with packaged libraries) bundle vulnerable versions of libxml2 (2.9.12) and libxslt (1.1.34). These bundled libraries introduce critical security risks to Ruby applications relying on Nokogiri for XML/XSL processing. CVE-2021-30560 in libxslt enables denial-of-service attacks when processing untrusted XSL stylesheets. More severely, CVE-2022-23308 in libxml2 allows for denial-of-service, memory disclosure, or arbitrary code execution if an application parses untrusted XML documents with the DTDVALID option set to true and NOENT set to false. Because these libraries are vendored directly within the Nokogiri gem, simply updating system-level libraries is insufficient; the gem itself must be updated to version 1.13.2 or later to include the patched libxml2 (2.9.13) and libxslt (1.1.35) binaries.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eApplications using affected versions of Nokogiri are vulnerable to exploitation when processing untrusted input. Successful exploitation can lead to complete service instability (DoS), leakage of sensitive process memory, or full remote code execution, depending on the specific application implementation and the XML parsing flags enabled. This affects any environment utilizing the Ruby gem on any operating system where the packaged libraries are utilized.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all Ruby projects utilizing Nokogiri \u0026lt; 1.13.2 by auditing Gemfile.lock files or scanning vendor directory assets.\u003c/li\u003e\n\u003cli\u003eUpdate Nokogiri to version 1.13.2 or later to ensure the inclusion of patched libxml2 2.9.13 and libxslt 1.1.35.\u003c/li\u003e\n\u003cli\u003eReview application logic to ensure XML parsing configurations avoid insecure settings like DTDVALID=true when processing untrusted content.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-25T18:51:07Z","date_published":"2026-08-25T18:09:35Z","id":"https://feed.craftedsignal.io/briefs/2026-08-nokogiri-vulnerabilities/","summary":"Nokogiri versions prior to 1.13.2 bundle vulnerable libxml2 2.9.12 and libxslt 1.1.34 libraries, exposing applications to denial of service, memory disclosure, and potential code execution.","title":"Vulnerabilities in Nokogiri Vendored libxml2 and libxslt Libraries","url":"https://feed.craftedsignal.io/briefs/2026-08-nokogiri-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}