PT-2022-16017 · Nokogiri+1 · Nokogiri+1

Davidwilemski · Published 2022-12-08 · Updated 2026-03-13 · CVE-2022-23476

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nokogiri versions 1.13.8 through 1.13.9

Description Nokogiri is an open source XML and HTML library for the Ruby programming language. It fails to check the return value from xmlTextReaderExpand in the method Nokogiri::XML::Reader#attribute hash. This can lead to a null pointer exception when invalid markup is being parsed. For applications using XML::Reader to parse untrusted inputs, this may potentially be a vector for a denial of service attack.

Recommendations Upgrade to Nokogiri >= 1.13.10. As a temporary workaround, consider searching code for calls to either XML::Reader#attributes or XML::Reader#attribute hash to determine if you are affected.

Exploit

Fix

DoS

NULL Pointer Dereference

Unchecked Return Value

Weakness Enumeration

CWE-476

CWE-252

Related Identifiers

CVE-2022-23476

GHSA-QV4Q-MR5R-QPRJ

OPENSUSE-SU-2024:13440-1

OPENSUSE-SU-2024:14174-1

OPENSUSE-SU-2025:14697-1

OPENSUSE-SU-2026:10356-1

Affected Products

Nokogiri

Red Os

References · 66

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23476.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2022-23476.yml · Exploit
• https://github.com/sparklemotion/nokogiri/commit/85410e38410f670cbbc8c5b00d07b843caee88ce · Patch
• https://github.com/sparklemotion/nokogiri/commit/9fe0761c47c0d4270d1a5220cfd25de080350d50 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10356-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23476 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-23476 · Security Note
• https://osv.dev/vulnerability/GHSA-qv4q-mr5r-qprj · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14174-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-23476 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23476 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13440-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-23476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23476 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-23476 · Vendor Advisory