CVE-2026-126063

The Nokogiri library (versions 1.12.0 to 1.19.5) contains a Mutation XSS vulnerability within its HTML5 serializer on the CRuby and TruffleRuby C extensions. The root cause is that the serializer fails to escape text inside noscript elements or angle brackets within attribute values. If an applic...