CVE-2026-126063

The Nokogiri library (versions 1.12.0 to 1.19.5) contains a Mutation XSS vulnerability within its HTML5 serializer on the CRuby and TruffleRuby C extensions. The root cause is that the serializer fails to escape text inside noscript elements or angle brackets within attribute values. If an applic...

EUVD-2026-122832

Nokogiri is an open source XML and HTML library for the Ruby programming language. From 1.12.0 until 1.19.5, the C extension on CRuby and TruffleRuby has a Nokogiri::HTML5 serializer that does not escape text inside noscript elements or angle brackets inside attribute values. When an application...