CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, pact-broker-docker-fips, pact-broker-docker, ruby4.0-rails, gitlab-rails-ce, kube-logging-operator, gitlab-rails-ce-fips...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails, kube-logging-operator...

DEBIAN-CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...