CVE-2012-6685 — rubygem-nokogiri: XML eXternal Entity (XXE) flaw

Back Back to CVE browser

HIGH

rubygem-nokogiri: XML eXternal Entity (XXE) flaw

Published Feb 19, 2020

7.5

HIGH

CVSS 3.1

EPSS 2.17%

Description

Nokogiri before 1.5.4 is vulnerable to XXE attacks

Affected products

CloudForms Management Engine 5.10

ansible-runner-0:1.1.2-2.el7ar

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ansible-tower-0:3.3.3-1.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

bubblewrap-0:0.1.7-1.el7

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

cfme-0:5.10.0.33-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

cfme-amazon-smartstate-0:5.10.0.33-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

cfme-appliance-0:5.10.0.33-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

cfme-gemset-0:5.10.0.33-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

dbus-api-service-0:1.0.1-5.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

dumb-init-0:1.2.0-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

erlang-0:19.3.6.7-1.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

google-compute-engine-0:2.0.0-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

google-config-0:2.0.0-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

httpd-configmap-generator-0:0.2.2-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

nginx-1:1.10.2-1.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-cluster-upgrade-0:1.1.8-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-disaster-recovery-0:1.1.2-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-engine-setup-0:1.1.5-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-image-template-0:1.1.8-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-infra-0:1.1.8-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-manageiq-0:1.1.12-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-repositories-0:1.1.2-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-roles-0:1.1.5-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-shutdown-env-0:1.0.0-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-v2v-conversion-host-0:1.6.3-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ovirt-ansible-vm-infra-0:1.1.10-1.el7ev

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

postgresql96-0:9.6.10-1PGDG.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

prince-0:9.0r2-10.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

pyOpenSSL-0:17.3.0-4.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-bambou-0:3.0.1-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-colorama-0:0.3.7-2.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-crypto-0:2.6.1-16.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-daemon-0:2.1.2-7.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-funcsigs-0:1.0.2-1.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-future-0:0.16.0-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-lockfile-1:0.11.0-10.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-meld3-0:0.6.10-1.el7

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-mock-0:2.0.0-1.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-pbr-0:3.1.1-2.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-pexpect-0:4.6-1.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-psutil-0:5.4.3-2.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-ptyprocess-0:0.5.2-3.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-pylxca-0:2.1.1-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-pysocks-0:1.5.6-3.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-requests-0:2.14.2-1.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-requests-toolbelt-0:0.8.0-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-tabulate-0:0.8.2-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-urllib3-0:1.21.1-1.2.el7ost

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

python-vspk-0:5.3.2-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

qpid-proton-0:0.19.0-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rabbitmq-server-0:3.7.4-1.el7at

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rh-postgresql95-repmgr-0:4.0.6-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

ruby-0:2.4.5-90.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-bcrypt-0:3.1.12-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-ffi-0:1.9.25-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-hamlit-0:2.8.8-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-http_parser.rb-0:0.6.0-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-json-0:2.1.0-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-linux_block_device-0:0.2.1-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-memory_buffer-0:0.1.0-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-nio4r-0:2.3.1-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-nokogiri-0:1.8.2-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-ovirt-engine-sdk4-0:4.2.4-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-pg-0:0.18.4-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-puma-0:3.7.1-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-qpid_proton-0:0.22.0-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-redhat_access_cfme-0:2.0.3-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-redhat_access_lib-0:1.1.4-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-rugged-0:0.27.4-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-sqlite3-0:1.3.13-2.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-unf_ext-0:0.0.7.5-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

rubygem-websocket-driver-0:0.6.5-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

smem-0:1.4-1.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

supervisor-0:3.1.4-1.el7

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

wmi-0:1.3.14-7.el7cf

Fixed · RHSA-2019:0212
CloudForms Management Engine 5.10

wxGTK3-0:3.0.3-5.el7at

Fixed · RHSA-2019:0212
OpenStack Foreman

ruby193-rubygem-nokogiri

Will not fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer

ruby193-rubygem-nokogiri

Fix deferred
Red Hat Enterprise MRG 2

rubygem-nokogiri

Will not fix
Red Hat OpenShift Enterprise 2

ruby193-rubygem-nokogiri

Will not fix
Red Hat OpenShift Enterprise 2

rubygem-nokogiri

Will not fix
Red Hat OpenStack Platform 4

ruby193-rubygem-nokogiri

Will not fix
Red Hat Satellite 6

ruby193-rubygem-nokogiri

Will not fix
Red Hat Subscription Asset Manager

ruby193-rubygem-nokogiri

Will not fix
Red Hat Subscription Asset Manager

rubygem-nokogiri

Will not fix

Product	Package	State	Advisory
CloudForms Management Engine 5.10	ansible-runner-0:1.1.2-2.el7ar	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ansible-tower-0:3.3.3-1.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	bubblewrap-0:0.1.7-1.el7	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	cfme-0:5.10.0.33-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	cfme-amazon-smartstate-0:5.10.0.33-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	cfme-appliance-0:5.10.0.33-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	cfme-gemset-0:5.10.0.33-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	dbus-api-service-0:1.0.1-5.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	dumb-init-0:1.2.0-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	erlang-0:19.3.6.7-1.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	google-compute-engine-0:2.0.0-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	google-config-0:2.0.0-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	httpd-configmap-generator-0:0.2.2-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	nginx-1:1.10.2-1.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-cluster-upgrade-0:1.1.8-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-disaster-recovery-0:1.1.2-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-engine-setup-0:1.1.5-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-image-template-0:1.1.8-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-infra-0:1.1.8-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-manageiq-0:1.1.12-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-repositories-0:1.1.2-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-roles-0:1.1.5-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-shutdown-env-0:1.0.0-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-v2v-conversion-host-0:1.6.3-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ovirt-ansible-vm-infra-0:1.1.10-1.el7ev	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	postgresql96-0:9.6.10-1PGDG.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	prince-0:9.0r2-10.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	pyOpenSSL-0:17.3.0-4.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-bambou-0:3.0.1-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-colorama-0:0.3.7-2.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-crypto-0:2.6.1-16.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-daemon-0:2.1.2-7.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-funcsigs-0:1.0.2-1.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-future-0:0.16.0-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-lockfile-1:0.11.0-10.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-meld3-0:0.6.10-1.el7	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-mock-0:2.0.0-1.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-pbr-0:3.1.1-2.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-pexpect-0:4.6-1.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-psutil-0:5.4.3-2.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-ptyprocess-0:0.5.2-3.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-pylxca-0:2.1.1-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-pysocks-0:1.5.6-3.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-requests-0:2.14.2-1.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-requests-toolbelt-0:0.8.0-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-tabulate-0:0.8.2-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-urllib3-0:1.21.1-1.2.el7ost	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	python-vspk-0:5.3.2-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	qpid-proton-0:0.19.0-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rabbitmq-server-0:3.7.4-1.el7at	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rh-postgresql95-postgresql-pglogical-0:2.1.0-4.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rh-postgresql95-repmgr-0:4.0.6-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	ruby-0:2.4.5-90.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-bcrypt-0:3.1.12-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-ffi-0:1.9.25-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-hamlit-0:2.8.8-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-http_parser.rb-0:0.6.0-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-json-0:2.1.0-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-linux_block_device-0:0.2.1-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-memory_buffer-0:0.1.0-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-nio4r-0:2.3.1-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-nokogiri-0:1.8.2-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-ovirt-engine-sdk4-0:4.2.4-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-pg-0:0.18.4-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-puma-0:3.7.1-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-qpid_proton-0:0.22.0-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-redhat_access_cfme-0:2.0.3-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-redhat_access_lib-0:1.1.4-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-rugged-0:0.27.4-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-sqlite3-0:1.3.13-2.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-unf_ext-0:0.0.7.5-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	rubygem-websocket-driver-0:0.6.5-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	smem-0:1.4-1.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	supervisor-0:3.1.4-1.el7	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	wmi-0:1.3.14-7.el7cf	Fixed	RHSA-2019:0212
CloudForms Management Engine 5.10	wxGTK3-0:3.0.3-5.el7at	Fixed	RHSA-2019:0212
OpenStack Foreman	ruby193-rubygem-nokogiri	Will not fix	n/a
Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer	ruby193-rubygem-nokogiri	Fix deferred	n/a
Red Hat Enterprise MRG 2	rubygem-nokogiri	Will not fix	n/a
Red Hat OpenShift Enterprise 2	ruby193-rubygem-nokogiri	Will not fix	n/a
Red Hat OpenShift Enterprise 2	rubygem-nokogiri	Will not fix	n/a
Red Hat OpenStack Platform 4	ruby193-rubygem-nokogiri	Will not fix	n/a
Red Hat Satellite 6	ruby193-rubygem-nokogiri	Will not fix	n/a
Red Hat Subscription Asset Manager	ruby193-rubygem-nokogiri	Will not fix	n/a
Red Hat Subscription Asset Manager	rubygem-nokogiri	Will not fix	n/a

Remediation

Red Hat statement

This issue affects the versions of ruby193-rubygem-nokogiri as shipped with Red Hat Satellite 6 and Red Hat OpenStack 6. Red Hat Product Security has rated this issue as having moderate security impact. A future update may address this issue. Red Hat Product Security has rated this issue as having no security impact for rubygem-nokogiri as shipped with: Red Hat Enterprise MRG 2.5, Red Hat Subscription Asset Manager 1.3, Red Hat CloudForms Management Engine 5.3.0, Red Hat OpenShift Enterprise 2.2.0; for ruby193-rubygem-nokogiri as shipped with Red Hat Satellite 6, Red Hat Subscription Asset Manager 1.3, Red Hat CloudForms Management Engine 5.3.0, Red Hat OpenStack 4.0, Red Hat OpenStack Foreman, Red Hat OpenStack 6, Red Hat OpenShift Enterprise 2.2.0; and for mingw-rubygem-nokogiri as shipped with Red Hat CloudForms Management Engine 5.3.0. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Metrics

2.17% 0.02168

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02168

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.17% (0.02168)	81.60th	v5 (v2026.06.15)
Jun 15, 2026	2.11% (0.02115)	79.35th	v5 (v2026.06.15)
Mar 30, 2025	0.45% (0.00447)	60.62th	v4 (v2025.03.14)
Mar 29, 2025	1.52% (0.01518)	69.49th	v4 (v2025.03.14)
Mar 17, 2025	0.45% (0.00447)	61.41th	v4 (v2025.03.14)
Dec 12, 2024	0.18% (0.00182)	56.80th	v3 (v2023.03.01)
Jun 22, 2024	0.18% (0.00182)	55.67th	v3 (v2023.03.01)
Mar 7, 2023	0.18% (0.00182)	53.66th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00954)	36.37th	v2 (v2022.01.01)
Sep 2, 2022	0.95% (0.00954)	34.50th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00954)	32.50th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00954)	16.28th	v2 (v2022.01.01)

Weaknesses (2)

CWE-611

XXE

CWE-776

References (7)

https://access.redhat.com/security/cve/CVE-2012-6685
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1178970
x_refsource_MISCIssue TrackingThird Party Advisory
https://github.com/advisories/GHSA-6wj9-77wq-jq7p
Advisory
https://github.com/sparklemotion/nokogiri/issues/693
x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nokogiri.org/CHANGELOG.html#154-2012-06-12
x_refsource_CONFIRMRelease NotesVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-6685
https://www.cve.org/CVERecord?id=CVE-2012-6685

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2012-6685		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1178970		x_refsource_MISCIssue TrackingThird Party Advisory
https://github.com/advisories/GHSA-6wj9-77wq-jq7p		Advisory
https://github.com/sparklemotion/nokogiri/issues/693		x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nokogiri.org/CHANGELOG.html#154-2012-06-12		x_refsource_CONFIRMRelease NotesVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-6685
https://www.cve.org/CVERecord?id=CVE-2012-6685