{"action":"Upgrade nokogiri to 1.19.1 or later.","affected":[{"fixed":"1.19.1","introduced":"1.5.1"}],"component":"nokogiri","cve_ids":["CVE-2026-79772"],"ecosystem":"RubyGems","epss":0.00342,"exploited":false,"fixed_versions":["1.19.1"],"ghsa_id":"GHSA-wx95-c6cv-8532","id":"tcs_01M5KEP2MP31HFS84EKC7AZYT3","modified_at":"2026-09-10T03:50:36.054145185Z","published_at":"2026-02-18T21:57:38Z","references":["https://osv.dev/vulnerability/GHSA-wx95-c6cv-8532","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-wx95-c6cv-8532","https://nvd.nist.gov/vuln/detail/CVE-2026-79772","https://github.com/sparklemotion/nokogiri","https://www.vulncheck.com/advisories/nokogiri-before-unchecked-return-value-canonicalize"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-wx95-c6cv-8532","url":"https://osv.dev/vulnerability/GHSA-wx95-c6cv-8532"}],"summary":"Nokogiri does not check the return value from xmlC14NExecute"}