CVE-2026-79770 | SparkleMotion Nokogiri up to 1.19.2 CSS Selector Tokenizer Node#css/Node#at_css/Searchable#search redos

A vulnerability classified as problematic was found in SparkleMotion Nokogiri up to 1.19.2. Affected is the function Node#css/Node#at_css/Searchable#search of the component CSS Selector Tokenizer. Such manipulation leads to inefficient regular expression complexity.

This vulnerability is listed as CVE-2026-79770. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More