GHSA-XQQH-3W52-Q8P7 Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wx95-c6cv-8532. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method,...

CVE-2026-79772

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

CVE-2026-79772

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

CVE-2026-79772

Nokogiri versions before 1.19.1 (a widely used Ruby XML library) contain an unchecked return value in the canonicalize method. The method calls xmlC14NExecute but fails to check its return value, returning an empty string on failure instead of raising an exception. This allows an attacker to bypa...