Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-06-25T14:34:09 nokogiri: Nokogiri: Denial of Service due to improper XPathContext garbage collection 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-771

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage collection. If an XPathContext outlived its document and the document was collected, evaluating an XPath expression could read invalid memory and potentially segfault. This is only reachable when application code constructs an XPathContext directly and lets the document become unreachable while continuing to use the context. The normal Document#xpath, #css, and related search methods are not affected, and it is not triggerable by malicious document input. This vulnerability is fixed in 1.19.4.

A flaw was found in Nokogiri, an XML and HTML library for Ruby. This vulnerability occurs when an application directly constructs an XPathContext and allows its associated document to be garbage collected while the context is still in use. An attacker could potentially exploit this by causing the application to read invalid memory, leading to a denial of service (DoS) through a segmentation fault.

Red Hat rates this flaw as Low impact, consistent with the upstream maintainers' assessment. This vulnerability is only reachable when application code directly constructs a Nokogiri::XML::XPathContext and allows the source document to be garbage collected while continuing to use the context. The normal Document#xpath, #css, and related search methods are not affected, and it is not triggerable by malicious document input. This is purely an application-level code pattern issue, not an externally exploitable vulnerability. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp21/backend Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp21/system Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp21/zync Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp22/backend Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp22/system Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp22/zync Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp26/toolbox Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/backend-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/system-rhel7 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/system-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/system-rhel9 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/toolbox-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/toolbox-rhel9 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/zync-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/zync-rhel9 Red Hat Satellite 6 Fix deferred rubygem-nokogiri Red Hat Satellite 6 Fix deferred satellite:el8/rubygem-nokogiri https://www.cve.org/CVERecord?id=CVE-2026-57437 https://nvd.nist.gov/vuln/detail/CVE-2026-57437 https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-p67v-3w7g-wjg7