Inefficient Regular Expression Complexity The advisory has been revoked - it doesn't affect any version of package tfm-rubygem-amazing_print  (opens in a new tab)


Threat Intelligence

EPSS
0.49% (40th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL7-TFMRUBYGEMAMAZINGPRINT-19415405
  • published28 Aug 2026
  • disclosed25 Aug 2026

Introduced: 25 Aug 2026

CVE-2026-79770  (opens in a new tab)
CWE-1333  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream tfm-rubygem-amazing_print package and not the tfm-rubygem-amazing_print package as distributed by RHEL.

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Node#css, Node#at_css, and Searchable#search to cause exponential regex backtracking and denial of service.