CVE-2025-71407 | sparklemotion Nokogiri up to 1.18.2 libxml2 stack-based overflow

August 25, 2026 Yanac

A vulnerability was found in sparklemotion Nokogiri up to 1.18.2. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component libxml2. The manipulation leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2025-71407. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More