CVE Tools
Track your stack

Sparklemotion

17 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.

Sparklemotion CVEs per month

Jun 2026 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Sparklemotion CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0680
2026-07null or fewer
2026-0890

Products

The products that kept showing up in Sparklemotion's monthly top three, with their CVEs summed over those months.

  1. Nokogiri172 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Sparklemotion.

  1. CVE-2026-79772Nokogiri before 1.19.1 Unchecked Return Value canonicalize5.3
  2. CVE-2026-79770Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer7.5
  3. CVE-2026-79771Nokogiri before 1.19.3 Memory Leak via XSLT Transform5.3
  4. CVE-2026-79769Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args5.5
  5. CVE-2026-54620sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks—
  6. CVE-2026-54619sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity—
  7. CVE-2026-57438Nokogiri: Possible Use-After-Free in XInclude Processing6.6
  8. CVE-2026-57437Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime5.3
  9. CVE-2026-57436Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type5.3
  10. CVE-2026-57435Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`7.5
  11. CVE-2026-57434Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes7.5
  12. CVE-2026-57235Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`8.2
  13. CVE-2026-57234Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-262472.6
  14. CVE-2026-57236Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception8.2
  15. CVE-2025-6494sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow3.3

The record

Peak rank
#184 in Aug 2026
Busiest month shown
Aug 2026, 9 CVEs
Months with a KEV entry
0 since Jun 2026
Monthly snapshots
2 since 2026
Sparklemotion's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store