CVE-2025-71346

Nokogiri versions prior to 1.18.8 are vulnerable due to their inclusion of an outdated libxml2 library, which contains a heap-based buffer under-read vulnerability. This flaw can be exploited when processing untrusted XML Schemas or documents, potentially leading to information disclosure or application crashes. Developers and organizations using Nokogiri for XML processing should prioritize upgrading to mitigate this low-severity risk.