CVE-2022-50999

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.13.5

Description An integer overflow exists in the packaged libxml2 buffer handling functions. This flaw allows attackers to cause out-of-bounds memory writes by crafting multi-gigabyte XML files. Such an action can trigger buffer overflows, leading to information disclosure, data modification, or denial of service.

Recommendations Update Nokogiri to version 1.13.5 or later.