GHSA-p67v-3w7g-wjg7
LowSummary
The vulnerability in the Nokogiri library causes `Nokogiri::XML::XPathContext` to not keep its source document alive for garbage collection. If an XPathContext outlives its document and the document is collected, evaluating an XPath expression could read invalid memory and potentially segfault.
Risk Assessment
The risk involves potential segfaults or application crashes when an XML document is garbage collected before the XPath context finishes using it. This could lead to service disruption or unpredictable behavior.
Recommendation
It is recommended to update the Nokogiri library to a version that includes a fix for this vulnerability. Also ensure that XML documents are kept alive as long as associated XPath contexts exist.
Original NVD description (English source)
### Summary `Nokogiri::XML::XPathContext` did not keep its source document alive for garbage collection. If an `XPathContext` outlived its document and the document was collected, evaluating an XPath expression could read invalid memory and potentially segfault. This is only reachable when applica