Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-25T15:16:02 nokogiri: Nokogiri: Process crash due to invalid memory read via programming error in internal method 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-843

Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a non-Node argument (e.g., a Namespace), it reads an xmlNs out of bounds, crashing the process. This is only triggerable by a programming error and cannot be triggered by untrusted input or normal use of the public API. Only CRuby is affected. Version 1.19.4 adds a type check and raises TypeError.

A flaw was found in Nokogiri. This vulnerability involves a possible invalid memory read in the internal Node#initialize_copy_with_args helper. If application code calls this protected method with an incorrect argument type, such as a non-Node object, it can lead to an out-of-bounds read, causing the process to crash. This issue is triggered by a programming error and cannot be exploited through untrusted input or normal use of the public application programming interface (API).

Red Hat 3scale API Management Platform 2 Out of support scope 3scale-amp2/backend-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/system-rhel8 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/system-rhel9 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/toolbox-rhel9 Red Hat 3scale API Management Platform 2 Fix deferred 3scale-amp2/zync-rhel9 Red Hat Satellite 6 Fix deferred rubygem-nokogiri Red Hat Satellite 6 Fix deferred tfm-rubygem-amazing_print Red Hat Satellite 6 Fix deferred tfm-rubygem-graphql https://www.cve.org/CVERecord?id=CVE-2026-79769 https://nvd.nist.gov/vuln/detail/CVE-2026-79769 https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-g9g8-vgvw-g3vf https://www.vulncheck.com/advisories/nokogiri-before-invalid-memory-read-via-initialize-copy-with-args