CVE-2024-58378 | sparklemotion Nokogiri up to 1.15.5/1.16.1 xmlTextReader module xmlValidatePopElement use after free

A vulnerability has been found in sparklemotion Nokogiri up to 1.15.5/1.16.1 and classified as critical. The impacted element is the function xmlValidatePopElement of the component xmlTextReader module. This manipulation causes use after free.

This vulnerability appears as CVE-2024-58378. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More