CVE-2026-57434

RubyGems/nokogiri CVE-2026-57434: low, EPSS 0.46%

Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Action: Upgrade nokogiri to 1.19.4 or later.

bundle update nokogiri

Affected

Fixed versions

Sources

• osv: GHSA-9cv2-cfxc-v4v2
• https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-9cv2-cfxc-v4v2
• https://github.com/sparklemotion/nokogiri

CVE-2026-57434 · published 2026-06-19T16:36:23Z · modified 2026-09-10T03:50:49.239685503Z · JSON