CVE-2025-71406

Nokogiri versions prior to 1.18.4 are vulnerable due to bundling an outdated version of libxslt, which contains critical use-after-free vulnerabilities that can lead to memory corruption when processing malicious XSLT. This high-severity flaw poses significant risks for applications relying on Nokogiri for XML processing, particularly those exposed to untrusted input. Developers and organizations using affected versions should prioritize upgrading to Nokogiri 1.18.4 or later to mitigate potential exploitation.