CVE-2022-50999

Nokogiri versions prior to 1.13.5 are susceptible to an integer overflow vulnerability in the libxml2 buffer handling functions, which can lead to out-of-bounds memory writes. Exploitation of this flaw allows attackers to craft large XML files, potentially resulting in information disclosure, data modification, or denial of service. Organizations using affected versions of Nokogiri should prioritize patching to mitigate these risks.