{"action":"Upgrade nokogiri to 1.19.3 or later.","affected":[{"fixed":"1.19.3","introduced":"0"}],"component":"nokogiri","cve_ids":["CVE-2026-79771"],"ecosystem":"RubyGems","epss":0.00423,"exploited":false,"fixed_versions":["1.19.3"],"ghsa_id":"GHSA-v2fc-qm4h-8hqv","id":"tcs_01M5KENDBNQ4A5WJSS07958GAK","modified_at":"2026-09-10T03:50:47.698230799Z","published_at":"2026-05-06T18:27:38Z","references":["https://osv.dev/vulnerability/GHSA-v2fc-qm4h-8hqv","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v2fc-qm4h-8hqv","https://nvd.nist.gov/vuln/detail/CVE-2026-79771","https://github.com/sparklemotion/nokogiri","https://www.vulncheck.com/advisories/nokogiri-before-memory-leak-via-xslt-transform"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-v2fc-qm4h-8hqv","url":"https://osv.dev/vulnerability/GHSA-v2fc-qm4h-8hqv"}],"summary":"Nokogiri XSLT transform has a memory leak"}