CVE:CVE-2022-24836
CNNVD:CNNVD-202204-2919
Nokogiri是一款用于解析Ruby中HTML和XML的开源软件库。
Nokogiri 1.13.4之前版本存在安全漏洞，该漏洞源于当试图检测HTML文档中的编码时，它容易受到过度回溯的影响。
solution:Upgrade nokogiri nokogiri to a higher version than 1.13.4,and avoid the version (,1.13.4); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade apple macos to a higher version than 13.1,and avoid the version [13.0,13.1)