S
Vendor security profile
sparklemotion
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical1
CISA KEV0
Public exploit1
Patch rate%42
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
9
0
3
CVE KEV
CVE severity distribution
12toplam CVE
Critical1 (8%)
High6 (50%)
Medium5 (42%)
Patch and exploitation view
%42
Verified patch
%0
CISA KEV
%8
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
6.8
CVE-2026-107715
Mechanize sends credential headers to another host after an HTTP redirect
S
Patch status unknownEPSS %0
5.9
CVE-2026-107714
Mechanize sends credential headers to a different scheme or port after a redirect
S
Patch status unknownEPSS %0
6.8
CVE-2026-107399
Mechanize sends credential headers to another origin after a meta refresh
S
Patch status unknownEPSS %0
6.9
CVE-2026-79772
Nokogiri before 1.19.1 Unchecked Return Value canonicalize
S
Patch status unknownEPSS %0
6.9
CVE-2026-79771
Nokogiri before 1.19.3 Memory Leak via XSLT Transform
S
Patch status unknownEPSS %0
8.7
CVE-2026-79770
Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
S
Patch status unknownEPSS %0
8.7
CVE-2026-79769
Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args
S
Patch status unknownEPSS %0
8.7
CVE-2023-54354
Nokogiri before 1.14.3 Null Pointer Dereference via libxml2
S
Patch verifiedEPSS %0
9.3
CVE-2022-51000
Nokogiri before 1.13.2 Multiple Vulnerabilities via libxml2 libxslt
S
Patch verifiedEPSS %0
8.8
CVE-2022-50999
Nokogiri before 1.13.5 Integer Overflow via libxml2
S
Patch verifiedEPSS %0