sparklemotion vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20212
3. 20225
4. 20252
5. 202617

Newest CVEs

• CVE-2026-107715

  Mechanize sends credential headers to another host after an HTTP redirect

  sparklemotion · mechanize

  Medium6.8
• CVE-2026-107714

  Mechanize sends credential headers to a different scheme or port after a redirect

  sparklemotion · mechanize

  Medium5.9
• CVE-2026-107399

  Mechanize sends credential headers to another origin after a meta refresh

  sparklemotion · mechanize

  Medium6.8
• CVE-2026-79772

  Nokogiri before 1.19.1 Unchecked Return Value canonicalize

  sparklemotion · nokogiri

  Medium6.9
• CVE-2026-79771

  Nokogiri before 1.19.3 Memory Leak via XSLT Transform

  sparklemotion · nokogiri

  Medium6.9
• CVE-2026-79770

  Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

  sparklemotion · nokogiri

  High8.7
• CVE-2026-79769

  Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args

  sparklemotion · nokogiri

  High8.7
• CVE-2026-54620

  sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks

  sparklemotion · sqlite3-ruby

  Low2.0
• CVE-2026-54619

  sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity

  sparklemotion · sqlite3-ruby

  Low2.0
• CVE-2026-57438

  Nokogiri: Possible Use-After-Free in XInclude Processing

  sparklemotion · nokogiri

  Low2.2