CyberRota Analysis
AI-GeneratedNokogiri versions prior to 1.19.3 are vulnerable to a memory leak in the XSLT Stylesheet transform method when handling Ruby strings with null bytes. This flaw can be exploited by attackers to pass malicious input, leading to heap allocation leaks and potential denial of service in long-running applications. Developers and organizations using affected versions should prioritize updating to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling denial of service against long-running processes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)