Captainjack-Kor

**Name of the Vulnerable Software and Affected Versions** Nokogiri versions prior to 1.19.3 **Description** A memory leak exists in the XSLT Stylesheet transform method when processing Ruby strings that contain null bytes. An attacker can trigger this by providing input containing null bytes to transform parameters, leading to leaked heap allocations. This can result in a denial of service for long-running processes. **Recommendations** Update to version 1.19.3 or later.