RubyGems/nokogiri CVE-2026-79772: medium 5.3, EPSS 0.34%
Nokogiri does not check the return value from xmlC14NExecute
Action: Upgrade nokogiri to 1.19.1 or later.
bundle update nokogiriAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.1 | 1.19.1 | - |
Fixed versions
| 1.19.1 |
Sources
- osv: GHSA-wx95-c6cv-8532
- https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-wx95-c6cv-8532
- https://nvd.nist.gov/vuln/detail/CVE-2026-79772
- https://github.com/sparklemotion/nokogiri
- https://www.vulncheck.com/advisories/nokogiri-before-unchecked-return-value-canonicalize
CVE-2026-79772 · published · modified · JSON