CVE-2022-51000

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2022-51000", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-25T14:31:37.342Z", "datePublished": "2026-08-25T15:15:55.205Z", "dateUpdated": "2026-09-08T14:57:44.226Z", "dateRejected": "2026-09-08T14:57:44.226Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected as a duplicate."}], "replacedBy": ["CVE-2021-30560", "CVE-2022-23308"], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-09-08T14:57:44.226Z"}}}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2022-51000", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "REJECTED", "assignerShortName": "VulnCheck", "dateReserved": "2026-08-25T14:31:37.342Z", "datePublished": "2026-08-25T15:15:55.205Z", "dateUpdated": "2026-09-08T14:57:44.226Z", "dateRejected": "2026-09-08T14:57:44.226Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected as a duplicate."}], "replacedBy": ["CVE-2021-30560", "CVE-2022-23308"], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-09-08T14:57:44.226Z"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected as a duplicate."}], "id": "CVE-2022-51000", "lastModified": "2026-09-08T15:18:11.477", "metrics": {}, "published": "2026-08-25T16:16:44.380", "references": [], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "rubygem-nokogiri: Nokogiri before 1.13.2 Multiple Vulnerabilities via libxml2 libxslt", "id": "2523579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523579"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["Nokogiri before 1.13.2 (CRuby, when using packaged libraries) ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via CVE-2021-30560 in libxslt, an application transforming XML with untrusted XSL stylesheets is vulnerable to a denial-of-service attack. Via CVE-2022-23308 in libxml2, an application parsing an untrusted document with parse option DTDVALID set to true and NOENT set to false may be vulnerable to denial of service, memory disclosure, or code execution. Nokogiri 1.13.2 upgrades vendored libxml2 to 2.9.13 and libxslt to 1.1.35.", "Nokogiri before 1.13.2, when using bundled libxml2 and libxslt, is affected by the libxslt flaw CVE-2021-30560 and the libxml2 flaw CVE-2022-23308."], "name": "CVE-2022-51000", "package_state": [{"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Not affected", "package_name": "3scale-amp2/backend-rhel8", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Not affected", "package_name": "3scale-amp2/system-rhel8", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Not affected", "package_name": "3scale-amp2/system-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Not affected", "package_name": "3scale-amp2/toolbox-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Not affected", "package_name": "3scale-amp2/zync-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "rubygem-nokogiri", "product_name": "Red Hat Satellite 6"}], "public_date": "2026-08-25T15:15:55Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-51000\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-51000\nhttps://github.com/sparklemotion/nokogiri/commit/50f9c9c\nhttps://github.com/sparklemotion/nokogiri/commit/652dd12\nhttps://github.com/sparklemotion/nokogiri/security/advisories/GHSA-fq42-c5rg-92c2\nhttps://www.vulncheck.com/advisories/nokogiri-before-multiple-vulnerabilities-via-libxml2-libxslt"], "statement": "This CVE does not represent a flaw in Nokogiri, but is rather a duplicate assignment for different CVEs affecting libxml2 or libxslt.\nThe rubygem-nokogiri packages as shipped in Red Hat products do not bundled libxml2 and libxslt, but rather use system packages of those libraries. This CVE is therefore not applicable to the rubygem-nokogiri packages provided by Red Hat.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "nokogiri", "vendor": "nokogiri"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.13.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.13.2"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "nokogiri", "source": "cna", "vendor": "sparklemotion"}, "product": "nokogiri", "vendor": "sparklemotion"}], "created": "2026-08-25T16:30:05.351900+00:00", "updated": "2026-08-25T16:30:06.096394+00:00", "vendors": ["nokogiri", "nokogiri$PRODUCT$nokogiri", "sparklemotion", "sparklemotion$PRODUCT$nokogiri"]}