Copy-Paste Vulnerability (CPV) Through Libxslt

nokogiri has a copied version of the libxslt library. The copy that nokogiri includes is vulnerable to the following issues: 1. CVE-2016-1683 - Denial of Service (DoS) via an out-of-bounds heap memory access. This is caused by libxslt mishandling namespace nodes leading to out-of-bounds heap memory access and possibly other attacks. 2. CVE-2016-1684 - Denial of Service via an integer overflow. This is caused by libxslt mishandling the i format token for xsl:number data, leading to an integer overflow, resource consumption and possibly other attacks.