LI
Product
libxml2
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add libxml2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40896 | 9.1 | Dec 23 | In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override… Affected: 2.11.0 before 2.11.9; 2.12.0 before 2.12.9; 2.13.0 before 2.13.3 |
| CVE-2025-9714 | 5.5 | Sep 10 | Stack overflow in libxml2 Affected: before 2.10.0; before 2.12.7+dfsg+really2.9.14-0.4ubuntu0.3; before 2.9.14+dfsg-1.3ubuntu3.5; before 2.9.13+dfsg-1ubuntu0.9; before 2.9.10+dfsg-5ubuntu0.20.04.10+esm2; before 2.9.4+dfsg1-6.1ubuntu1.9+esm5; +2 more |
Showing 2