Vulnerabilities in sparklemotion
30 resultsCVE-2026-107714MEDIUMMechanize sends credential headers to a different scheme or port after a redirectEPSS 0.2%CVE-2026-57234LOWNokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247EPSS 0.2%CVE-2025-6490MEDIUMsparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflowEPSS 0.2%CVE-2025-6494MEDIUMsparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflowEPSS 0.2%CVE-2026-54619LOWsqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different ArityEPSS 0.1%CVE-2026-54620LOWsqlite3-ruby has Use-After-Free in SQLite Aggregate Function CallbacksEPSS 0.1%CVE-2026-57438LOWNokogiri: Possible Use-After-Free in XInclude ProcessingEPSS 0.1%CVE-2026-126064LOWNokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`EPSS —CVE-2026-126062LOWNokogiri : Possible SSRF on JRuby when resolving external DTDs or entities with `NONET` setEPSS —CVE-2026-126063LOWNokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializerEPSS —