CVE-2025-71406: Nokogiri Vulnerable Bundled Libxslt

Bundled libxslt version prior to 1.1.43 is vulnerable to use-after-free issues (CVE-2025-71406).

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0YAML
greprules fetch cve-2025-71406-nokogiri-vulnerable-bundled-libxslt --engine opengrep

Description

Bundled libxslt version prior to 1.1.43 is vulnerable to use-after-free issues (CVE-2025-71406).