CVE-2025-71406 | sparklemotion Nokogiri up to 1.18.3 libxslt use after free

August 25, 2026 Yanac

A vulnerability identified as critical has been detected in sparklemotion Nokogiri up to 1.18.3. This affects an unknown part of the component libxslt. This manipulation causes use after free.

The identification of this vulnerability is CVE-2025-71406. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More