VDB
CVE-2026-79772
CVE-2026-79772
PUBLISHED
CVSS 6.9 MEDIUM
Reported by VulnCheck · Published August 25, 2026
Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid canonicalized XML that is incorrectly accepted as valid.
Risk Scores
CVSS 4.0
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sparklemotion | nokogiri | 1.5.1, 1.19.1 |
| chainguard | ruby3.3-rails-8.1 | 0, 0, 0 |
| chainguard | ruby3.2-rails-8.0 | 0, 0, 0 |
| wolfi | ruby3.4-rails-8.1 | 0, 0, 0 |
| chainguard | ruby4.0-rails-8.1 | 0, 0, 0 |
| chainguard | ruby3.3-rails-7.1 | 0, 0, 0 |
| chainguard | ruby3.3-rails-8.0 | 0, 0, 0 |
| sparklemotion | nokogiri | 1.19.1, 1.5.1, 1.5.1 |
| chainguard | ruby3.2-rails-8.1 | 0, 0, 0 |
| chainguard | ruby4.0-rails-7.1 | 0, 0, 0 |
| chainguard | ruby3.2-rails-7.1 | 0, 0, 0 |
| nokogiri | nokogiri | 1.5.1, 1.5.1 |
| chainguard | ruby3.4-rails-7.1 | 0, 0, 0 |
| wolfi | ruby3.3-rails-8.1 | 0, 0, 0 |
| chainguard | ruby3.4-rails-7.2 | 0, 0, 0 |
| chainguard | ruby3.2-rails-7.2 | 0, 0, 0 |
| chainguard | ruby3.4-rails-8.1 | 0, 0, 0 |
| wolfi | ruby3.2-rails-8.1 | 0, 0, 0 |
| chainguard | ruby4.0-rails-7.2 | 0, 0, 0 |
| chainguard | ruby3.4-rails-8.0 | 0, 0, 0 |
…and 3 more
Timeline
- Feb 18, 2026 CVE Published
- Aug 25, 2026 Coalition ESS Score
- Aug 26, 2026 EPSS Score
- Sep 2, 2026 EPSS Score
- Sep 2, 2026 Security Advisory
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
- Sep 17, 2026 EPSS Score
- Sep 18, 2026 EPSS Score
- Sep 24, 2026 EPSS Score
- Sep 26, 2026 EPSS Score
- Sep 30, 2026 EPSS Score
References
- GitHub Security Advisory (GHSA-wx95-c6cv-8532) vendor-advisory
- VulnCheck Advisory: Nokogiri before 1.19.1 Unchecked Return Value canonicalize third-party-advisory