CVE-2026-79771

Name
CVE-2026-79771
Description
Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling denial of service against long-running processes.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
disclosure@vulncheck.com https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-v2fc-qm4h-8hqv
disclosure@vulncheck.com https://www.vulncheck.com/advisories/nokogiri-before-memory-leak-via-xslt-transform

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:nokogiri:nokogiri:*:*:*:*:*:ruby:*:* ruby-nokogiri >= None < 1.19.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
ruby-nokogiri edge-community 1.19.2-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.19.0-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.18.8-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.18.0-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.16.7-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.13.10-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.13.6-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.13.4-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.11.6-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable
ruby-nokogiri edge-community 1.10.4-r0 None possibly vulnerable
ruby-nokogiri 3.24-community 1.19.2-r0 Jakub Jirutka <jakub@jirutka.cz> possibly vulnerable