CVE-2024-58377

unknowncovered by 1 sourcefirst seen 2026-08-25

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the xmllint tool where the issue occurs.

⚡ Watch CVE-2024-58377

Get an email if CVE-2024-58377 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

unknownCVE-2024-58377: Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in …nvd · 2026-08-25

External references

NVD record for CVE-2024-58377

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-58377 status](https://www.csirts.com/badge/CVE-2024-58377)](https://www.csirts.com/cve/CVE-2024-58377)