CVE-2025-71407

Nokogiri versions prior to 1.18.3 are vulnerable to a stack buffer overflow and a use-after-free vulnerability in libxml2, which can be exploited through malicious DTD content or untrusted XML Schemas. This could lead to denial of service or potentially allow attackers to execute arbitrary code. Organizations using Nokogiri should prioritize upgrading to the latest version to mitigate these critical risks.