Critical Nokogiri Vulnerability: CVE-2025-71407
A critical vulnerability (CVE-2025-71407) with a CVSS score of 9.8 affects Nokogiri, a popular Ruby gem for parsing XML and HTML. The vulnerability involves a stack buffer overflow and a use-after-free issue in libxml2, which can lead to denial of service or potential code execution. Affected versions are Nokogiri before 1.18.3. Immediate patching is recommended.