{"action":"Upgrade nokogiri to 1.18.3 or later.","affected":[{"fixed":"1.18.3","introduced":"0"}],"component":"nokogiri","cve_ids":["CVE-2025-71407"],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["1.18.3"],"ghsa_id":"GHSA-vvfq-8hwr-qm4m","id":"tcs_01M5KENPKXBJY8Y0BTYMGGR3T9","modified_at":"2026-09-10T03:50:06.313802204Z","published_at":"2025-02-18T22:36:03Z","references":["https://osv.dev/vulnerability/GHSA-vvfq-8hwr-qm4m","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vvfq-8hwr-qm4m","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/GHSA-vvfq-8hwr-qm4m.yml","https://github.com/sparklemotion/nokogiri"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-vvfq-8hwr-qm4m","url":"https://osv.dev/vulnerability/GHSA-vvfq-8hwr-qm4m"}],"summary":"Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171"}