CVE-2024-58377

✕ Withdrawn — historical dataMEDIUMPre-NVD 5.5
5.5CVSS

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the xmllint tool where the issue occurs.

CVSS v3
5.5
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

August 25, 2026

Last Modified

September 1, 2026

References (3)

Frequently asked(4)

What is CVE-2024-58377?
CVE-2024-58377 is a rejected CVE ID: its record was withdrawn on September 1, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected as a duplicate.
When was the CVE record for CVE-2024-58377 published?
The CVE record for CVE-2024-58377 was published on August 25, 2026. EchelonGraph's copy of the record carries a last-modified date of September 1, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2024-58377?
CVE-2024-58377 has a CVSS base score of 5.5 (a secondary CVSS source that NVD displays; NVD's own analysis pending).
How do I remediate CVE-2024-58377?
There is nothing to remediate under CVE-2024-58377: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.