{"schema_version":1,"title":"Sparklemotion vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 17 vulnerabilities in Sparklemotion: 2 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-126064, was published on 10 November 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before.","url":"https://junglewise.ai/threats/vendors/sparklemotion","json_url":"https://junglewise.ai/threats/vendors/sparklemotion.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/sparklemotion","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":2,"all_time":17,"critical":0,"exploited":0,"last_7_days":2,"last_30_days":2,"last_90_days":7,"last_365_days":17},"latest":[{"cve":"CVE-2026-126064","cvss":4,"slug":"cve-2026-126064-nokogiri-is-an-open-source-xml-and-html-library-for-the-ruby","title":"Nokogiri use-after-free in attribute replacement","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:24.147+00:00","url":"https://junglewise.ai/threats/cve-2026-126064-nokogiri-is-an-open-source-xml-and-html-library-for-the-ruby"},{"cve":"CVE-2026-126063","cvss":4,"slug":"cve-2026-126063-nokogiri-is-an-open-source-xml-and-html-library-for-the-ruby","title":"Nokogiri HTML5 serializer mutation XSS via noscript and attributes","severity":"medium","exploited":false,"published_at":"2026-11-10T21:19:23.99+00:00","url":"https://junglewise.ai/threats/cve-2026-126063-nokogiri-is-an-open-source-xml-and-html-library-for-the-ruby"},{"cve":"CVE-2026-107714","cvss":5.9,"epss":0.0023,"slug":"cve-2026-107714-the-mechanize-library-is-used-for-automating-interaction-with","title":"Mechanize credential leak via cross-origin redirects","severity":"medium","exploited":false,"published_at":"2026-10-08T22:17:27.003+00:00","url":"https://junglewise.ai/threats/cve-2026-107714-the-mechanize-library-is-used-for-automating-interaction-with"},{"cvss":7.5,"slug":"nokogiri-css-selector-tokenizer-redos-d52ae203","title":"Nokogiri CSS selector tokenizer ReDoS","severity":"high","exploited":false,"published_at":"2026-08-25T18:31:52+00:00","url":"https://junglewise.ai/threats/nokogiri-css-selector-tokenizer-redos-d52ae203"},{"cve":"CVE-2026-79772","cvss":5.3,"epss":0.0034,"slug":"cve-2026-79772-nokogiri-cruby-unchecked-return-value-in-canonicalize","title":"Nokogiri CRuby unchecked return value in canonicalize","severity":"medium","exploited":false,"published_at":"2026-08-25T16:17:28.743+00:00","url":"https://junglewise.ai/threats/cve-2026-79772-nokogiri-cruby-unchecked-return-value-in-canonicalize"},{"cve":"CVE-2026-79771","cvss":5.3,"epss":0.0042,"slug":"cve-2026-79771-nokogiri-xslt-stylesheet-transform-memory-leak","title":"Nokogiri XSLT Stylesheet transform memory leak","severity":"medium","exploited":false,"published_at":"2026-08-25T16:17:28.603+00:00","url":"https://junglewise.ai/threats/cve-2026-79771-nokogiri-xslt-stylesheet-transform-memory-leak"},{"cve":"CVE-2026-79770","cvss":7.5,"epss":0.0049,"slug":"cve-2026-79770-nokogiri-css-selector-tokenizer-regular-expression-dos","title":"Nokogiri CSS selector tokenizer regular expression DoS","severity":"high","exploited":false,"published_at":"2026-08-25T16:17:28.46+00:00","url":"https://junglewise.ai/threats/cve-2026-79770-nokogiri-css-selector-tokenizer-regular-expression-dos"},{"cve":"CVE-2026-54620","cvss":4,"epss":0.0014,"slug":"cve-2026-54620-sparklemotion-sqlite3-ruby-use-after-free-in-aggregate-function","title":"sparklemotion sqlite3-ruby use-after-free in aggregate function callbacks","severity":"medium","exploited":false,"published_at":"2026-07-28T17:16:52.79+00:00","url":"https://junglewise.ai/threats/cve-2026-54620-sparklemotion-sqlite3-ruby-use-after-free-in-aggregate-function"},{"cve":"CVE-2026-54619","cvss":4,"epss":0.0014,"slug":"cve-2026-54619-sparklemotion-sqlite3-ruby-use-after-free-in-function","title":"sparklemotion sqlite3-ruby use-after-free in function redefinition","severity":"medium","exploited":false,"published_at":"2026-07-28T17:16:52.65+00:00","url":"https://junglewise.ai/threats/cve-2026-54619-sparklemotion-sqlite3-ruby-use-after-free-in-function"},{"cve":"CVE-2026-57438","cvss":2.2,"epss":0.0013,"slug":"cve-2026-57438-nokogiri-use-after-free-in-xinclude-processing","title":"Nokogiri use-after-free in XInclude processing","severity":"info","exploited":false,"published_at":"2026-06-25T16:16:42.13+00:00","url":"https://junglewise.ai/threats/cve-2026-57438-nokogiri-use-after-free-in-xinclude-processing"},{"cve":"CVE-2026-57437","cvss":4,"epss":0.004,"slug":"cve-2026-57437-nokogiri-use-after-free-in-xml-xpathcontext","title":"Nokogiri use-after-free in XML::XPathContext","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:41.317+00:00","url":"https://junglewise.ai/threats/cve-2026-57437-nokogiri-use-after-free-in-xml-xpathcontext"},{"cve":"CVE-2026-57436","cvss":4,"epss":0.004,"slug":"cve-2026-57436-nokogiri-use-after-free-in-document-root-assignment","title":"Nokogiri use-after-free in Document root assignment","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:41.163+00:00","url":"https://junglewise.ai/threats/cve-2026-57436-nokogiri-use-after-free-in-document-root-assignment"},{"cve":"CVE-2026-57435","cvss":4,"epss":0.0046,"slug":"cve-2026-57435-nokogiri-use-after-free-in-xml-attribute-value-replacement","title":"Nokogiri use-after-free in XML attribute value replacement","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:41+00:00","url":"https://junglewise.ai/threats/cve-2026-57435-nokogiri-use-after-free-in-xml-attribute-value-replacement"},{"cve":"CVE-2026-57434","cvss":4,"epss":0.0046,"slug":"cve-2026-57434-nokogiri-null-pointer-dereference-in-xml-node-wrapper-classes","title":"Nokogiri NULL pointer dereference in XML Node wrapper classes","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.86+00:00","url":"https://junglewise.ai/threats/cve-2026-57434-nokogiri-null-pointer-dereference-in-xml-node-wrapper-classes"},{"cve":"CVE-2026-57236","cvss":4,"epss":0.0043,"slug":"cve-2026-57236-nokogiri-use-after-free-in-document-encoding-assignment","title":"Nokogiri use-after-free in Document encoding assignment","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.627+00:00","url":"https://junglewise.ai/threats/cve-2026-57236-nokogiri-use-after-free-in-document-encoding-assignment"},{"cve":"CVE-2026-57235","cvss":4,"epss":0.0043,"slug":"cve-2026-57235-nokogiri-out-of-bounds-read-in-nodeset-indexing","title":"Nokogiri out-of-bounds read in NodeSet indexing","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.493+00:00","url":"https://junglewise.ai/threats/cve-2026-57235-nokogiri-out-of-bounds-read-in-nodeset-indexing"},{"cve":"CVE-2026-57234","cvss":3.1,"epss":0.002,"slug":"cve-2026-57234-nokogiri-xxe-and-ssrf-via-nonet-bypass-in-jruby-xml-schema","title":"Nokogiri XXE and SSRF via NONET bypass in JRuby XML Schema parsing","severity":"low","exploited":false,"published_at":"2026-06-25T15:16:40.343+00:00","url":"https://junglewise.ai/threats/cve-2026-57234-nokogiri-xxe-and-ssrf-via-nonet-bypass-in-jruby-xml-schema"}],"vendor":{"hub":true,"name":"Sparklemotion","slug":"sparklemotion","description":"sparklemotion is a Ruby gem for parsing and manipulating XML and HTML documents.","url":"https://junglewise.ai/threats/vendors/sparklemotion"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":2}],"most_severe":[{"cve":"CVE-2026-79770","cvss":7.5,"epss":0.0049,"slug":"cve-2026-79770-nokogiri-css-selector-tokenizer-regular-expression-dos","title":"Nokogiri CSS selector tokenizer regular expression DoS","severity":"high","exploited":false,"published_at":"2026-08-25T16:17:28.46+00:00","url":"https://junglewise.ai/threats/cve-2026-79770-nokogiri-css-selector-tokenizer-regular-expression-dos"},{"cvss":7.5,"slug":"nokogiri-css-selector-tokenizer-redos-d52ae203","title":"Nokogiri CSS selector tokenizer ReDoS","severity":"high","exploited":false,"published_at":"2026-08-25T18:31:52+00:00","url":"https://junglewise.ai/threats/nokogiri-css-selector-tokenizer-redos-d52ae203"},{"cve":"CVE-2026-107714","cvss":5.9,"epss":0.0023,"slug":"cve-2026-107714-the-mechanize-library-is-used-for-automating-interaction-with","title":"Mechanize credential leak via cross-origin redirects","severity":"medium","exploited":false,"published_at":"2026-10-08T22:17:27.003+00:00","url":"https://junglewise.ai/threats/cve-2026-107714-the-mechanize-library-is-used-for-automating-interaction-with"},{"cve":"CVE-2026-79771","cvss":5.3,"epss":0.0042,"slug":"cve-2026-79771-nokogiri-xslt-stylesheet-transform-memory-leak","title":"Nokogiri XSLT Stylesheet transform memory leak","severity":"medium","exploited":false,"published_at":"2026-08-25T16:17:28.603+00:00","url":"https://junglewise.ai/threats/cve-2026-79771-nokogiri-xslt-stylesheet-transform-memory-leak"},{"cve":"CVE-2026-79772","cvss":5.3,"epss":0.0034,"slug":"cve-2026-79772-nokogiri-cruby-unchecked-return-value-in-canonicalize","title":"Nokogiri CRuby unchecked return value in canonicalize","severity":"medium","exploited":false,"published_at":"2026-08-25T16:17:28.743+00:00","url":"https://junglewise.ai/threats/cve-2026-79772-nokogiri-cruby-unchecked-return-value-in-canonicalize"},{"cve":"CVE-2026-57435","cvss":4,"epss":0.0046,"slug":"cve-2026-57435-nokogiri-use-after-free-in-xml-attribute-value-replacement","title":"Nokogiri use-after-free in XML attribute value replacement","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:41+00:00","url":"https://junglewise.ai/threats/cve-2026-57435-nokogiri-use-after-free-in-xml-attribute-value-replacement"},{"cve":"CVE-2026-57434","cvss":4,"epss":0.0046,"slug":"cve-2026-57434-nokogiri-null-pointer-dereference-in-xml-node-wrapper-classes","title":"Nokogiri NULL pointer dereference in XML Node wrapper classes","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.86+00:00","url":"https://junglewise.ai/threats/cve-2026-57434-nokogiri-null-pointer-dereference-in-xml-node-wrapper-classes"},{"cve":"CVE-2026-57236","cvss":4,"epss":0.0043,"slug":"cve-2026-57236-nokogiri-use-after-free-in-document-encoding-assignment","title":"Nokogiri use-after-free in Document encoding assignment","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.627+00:00","url":"https://junglewise.ai/threats/cve-2026-57236-nokogiri-use-after-free-in-document-encoding-assignment"},{"cve":"CVE-2026-57235","cvss":4,"epss":0.0043,"slug":"cve-2026-57235-nokogiri-out-of-bounds-read-in-nodeset-indexing","title":"Nokogiri out-of-bounds read in NodeSet indexing","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:40.493+00:00","url":"https://junglewise.ai/threats/cve-2026-57235-nokogiri-out-of-bounds-read-in-nodeset-indexing"},{"cve":"CVE-2026-57437","cvss":4,"epss":0.004,"slug":"cve-2026-57437-nokogiri-use-after-free-in-xml-xpathcontext","title":"Nokogiri use-after-free in XML::XPathContext","severity":"medium","exploited":false,"published_at":"2026-06-25T15:16:41.317+00:00","url":"https://junglewise.ai/threats/cve-2026-57437-nokogiri-use-after-free-in-xml-xpathcontext"}],"generated_at":"2026-11-11T23:07:00.150695+00:00","technologies":[]}