GHSA-v2fc-qm4h-8hqv: Nokogiri XSLT transform has a memory leak

Nokogiri’s Nokogiri::XSLT::Stylesheet#transform leaks a small heap allocation when passed a Ruby string parameter containing a null byte.

For applications that pass attacker-controlled input through XSLT.transform parameters, this may be a vector for a denial of service attack against long-running processes.