Colby-Swandale

**Name of the Vulnerable Software and Affected Versions** Nokogiri versions prior to 1.19.3 **Description** A regular expression denial of service exists in the CSS selector tokenizer, specifically affecting string-literal and identifier tokenization. Attackers can cause exponential regex backtracking, leading to a denial of service, by injecting adversarial CSS selectors into the `Node#css`, `Node#at css`, and `Searchable#search` methods. **Recommendations** Update to version 1.19.3 or later.