CVE-2022-29181

CVE-2022-29181 is a high-severity vulnerability affecting Nokogiri, an XML and HTML library for Ruby, specifically versions prior to 1.13.6, as well as Apple macOS and Apple Nokogiri. The flaw stems from insufficient type-checking in the XML and HTML4 SAX parsers, allowing specially crafted untrusted input to trigger illegal memory access errors (segfaults) or unauthorized memory reads. With a CVSS score of 8.2, this vulnerability is remotely exploitable with low attack complexity, potentially leading to denial of service (high impact) and information disclosure (low impact). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.