CVE-2026-126063 | Sparklemotion Nokogiri up to 1.19.4 HTML5 Serializer HTML injection

November 10, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Sparklemotion Nokogiri up to 1.19.4. This affects an unknown function of the component HTML5 Serializer. Executing a manipulation can lead to HTML injection.

This vulnerability is handled as CVE-2026-126063. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More