CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, pact-broker-docker-fips, ruby3.4-rails, gitlab-rails-ce, ruby3.3-rails, pact-broker-docker, gitlab-rails-ce-fips, ruby3.2-rails, ruby4.0-rails...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, kube-logging-operator, ruby3.2-rails...

DEBIAN-CVE-2026-79771

Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this by passing attacker-controlled input with null bytes to transform parameters, causing heap allocations to leak and enabling...