CVE-2022-23476

CVE-2022-23476 is a denial-of-service vulnerability affecting Nokogiri versions 1.13.8 and 1.13.9, an open-source XML and HTML library for Ruby. The flaw stems from a failure to check the return value of xmlTextReaderExpand in Nokogiri::XML::Reader#attribute_hash, leading to a null pointer exception when parsing invalid markup. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely with low attack complexity, potentially causing a denial of service. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.