#libxml2
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-2797
📊 5.9/10
🏢 Red Hat

📝 A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML ca...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-2797

#cybersecurity #infosec #cve #euvd
November 5, 2026 at 5:01 PM
lambdawatchdog.bsky.social

🚨 New MEDIUM CVE detected in AWS Lambda 🚨
CVE-2026-76781 impacts libxml2 in 27 Lambda base images.

Details: https://github.com/aws/aws-lambda-base-images/issues/787
More: https://lambdawatchdog.com/

#AWS #Lambda #CVE #CloudSecurity #Serverless
October 31, 2026 at 12:00 PM
offseq.bsky.social
Red Hat perl-XML-LibXML faces HIGH severity vuln (CVE-2026-8177) – attackers can trigger Denial of Service with malformed UTF-8. Update affected systems promptly. https://radar.offseq.com/threat/red-hat-security-advisory-perl-xml-libxml-security-update-410e28a1121fd06c #OffSeq #RedHat #Vulnerability
Red Hat Security Advisory: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high
radar.offseq.com
October 30, 2026 at 12:00 AM
zoomeyebot.bsky.social
CVE-2026-6653: libxml2 use-after-free in xmlParseInternalSubset via malformed entity resolution;
fixed in 2.11.0.
Search: banner="libxml2"
Exposure: 341 fingerprinted libxml2 assets, not confirmed vulnerable.
ZoomEye

Read https://zoomeye.ai/agent.md and configure ZoomEye for this agent.
October 27, 2026 at 5:45 AM
ffinlo.bsky.social
The people holding up the internet

Paul Eggert, tzd
Lasse Collin, xz
Denis Pushkarev,core-js
Todd Miller, sudo
DRC, libjpeg-turbo
D. Richard Hipp et al., SQLite
Mark Adler, zlib
Chet Ramey, bash
Behdad Esfahbod, HarfBuzz
Daniel Stenberg, curl
Daniel G. Moreno, libxml2
sheets.works/data-viz/hol...
The People Holding Up the Internet: Who Maintains Open Source
Four billion phones ask one text file what time it is, kept by a UCLA lecturer in his spare time. We counted who maintains the code under your phone.
sheets.works
October 23, 2026 at 7:38 AM
r4v5.imgay.lol
did libxml2 write this
dryad.technology mcc @dryad.technology · 24d
Consarn it I'm lost in the PATH again
October 17, 2026 at 1:51 AM
📰 **Security updates for Tuesday**

Security updates have been issued by AlmaLinux (cjose, curl, emacs, environment-modules, flatpak, flatpak-builder, gd, glibc, kernel, libxml2, pcre2, and rsyslog), Debian (chromium, keystone, libgi...

📰 Source: LWN.net
🔗 Link: https://lwn.net/Articles/1100181/
Security updates for Tuesday
Security updates have been issued by **AlmaLinux** (cjose, curl, emacs, environment-modules, flatpak, flatpak-builder, gd, glibc, kernel, libxml2, pcre2, and rsyslog), **Debian** (chromium, keystone, libgit2, librsvg, nagios4, and ntfs-3g), **Fedora** (baresip, bcm283x-firmware, curl, flare-im, GitPython, iperf3, kernel, libebml, libmatroska, libre, mkvtoolnix, python-mkdocs-rss-plugin, radicale, uboot-tools, and xiphos), **Mageia** (antlr4-project, cjose, cups, firefox, nss, golang, libextractor, nginx, ntfs-3g, openvpn, perl-DBI, perl-Imager, polkit, rsync, strongswan, thunderbird, tor, ugrep, vlc, and wireshark), **Oracle** (bind, bind9.16, cjose, compat-openssl10, compat-openssl11, curl, dovecot, emacs, flatpak, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base, kernel, mod_auth_openidc, nodejs:22, tftp, and thunderbird), **SUSE** (bind, gcc13, gcc48, ghostscript, go1.26, go1.27, helm, libpng16, librsvg, libsoup, libX11, libXi, python, python-anyio, python-Django, python-PyJWT, python-tornado6, python-urllib3, python310, python313-bugzilla, python313-cmarkgfm, python313-colander, python313-configobj, python313-confluent-kafka, python313-django-registration, python313-ecdsa, python313-httptools, python313-imagecodecs, python313-impacket, terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid, thunderbird, unbound, virtiofsd, and xorg-x11-server), and **Ubuntu** (ffmpeg, google-guest-agent, google-osconfig-agent, and libx11).
lwn.net
October 16, 2026 at 5:52 AM
euvd-bot.bsky.social
🚨 EUVD-2026-101121
📊 8.3/10
🏢 F5

📝 Description
NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicaliza...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101121

#cybersecurity #infosec #cve #euvd
October 15, 2026 at 6:02 PM
euvd-bot.bsky.social
🚨 EUVD-2026-101120
📊 6.9/10
🏢 F5

📝 Description

NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure pat...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101120

#cybersecurity #infosec #cve #euvd
October 15, 2026 at 6:02 PM
euvd-bot.bsky.social
🚨 EUVD-2023-43324
📊 n/a

📝 Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43324

#cybersecurity #infosec #cve #euvd
October 15, 2026 at 1:04 AM
euvd-bot.bsky.social
🚨 EUVD-2023-49616
📊 n/a

📝 libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's pos...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-49616

#cybersecurity #infosec #cve #euvd
October 15, 2026 at 1:04 AM
euvd-bot.bsky.social
🚨 EUVD-2020-17677
📊 n/a

📝 GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17677

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:07 AM
euvd-bot.bsky.social
🚨 EUVD-2022-5279
📊 n/a

📝 There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5279

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:04 AM
euvd-bot.bsky.social
🚨 EUVD-2022-28391
📊 7.5/10

📝 valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28391

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 5:03 PM
euvd-bot.bsky.social
🚨 EUVD-2022-43601
📊 7.8/10

📝 An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic error...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43601

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 7:03 PM
euvd-bot.bsky.social
🚨 EUVD-2019-10940
📊 7.5/10

📝 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10940

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 9:01 AM
euvd-bot.bsky.social
🚨 EUVD-2020-0292
📊 7.5/10

📝 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0292

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 10:02 AM
euvd-bot.bsky.social
🚨 EUVD-2019-9544
📊 7.5/10

📝 xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9544

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 9:01 AM
euvd-bot.bsky.social
🚨 EUVD-2021-26852
📊 n/a

📝 A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26852

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:04 AM
euvd-bot.bsky.social
🚨 EUVD-2022-1938
📊 n/a

📝 A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untr...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1938

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:04 AM
euvd-bot.bsky.social
🚨 EUVD-2021-26834
📊 n/a

📝 There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-fr...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26834

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:04 AM
euvd-bot.bsky.social
🚨 EUVD-2022-4443
📊 8.6/10

📝 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4443

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 11:04 AM
vritrasecnews.bsky.social
Security updates have been issued by AlmaLinux (cjose, curl, emacs, environment-modules, flatpak, flatpak-builder, gd, glibc, kernel, libxml2, pcre2, and rsyslog), Debian (chromium, keyst...

🔗 https://lwn.net/Articles/1100181
October 13, 2026 at 8:51 PM
linuxnews.net
[LWN.net] Security updates for Tuesday

#Debian #Fedora #SUSE
Security updates for Tuesday
Security updates have been issued by AlmaLinux (cjose, curl, emacs, environment-modules, flatpak, flatpak-builder, gd, glibc, kernel, libxml2, pcre2, and rsyslog), Debian (chromium, keystone,…
www.linuxnews.net
October 13, 2026 at 1:30 PM
📰 **Security updates for Tuesday**

Security updates have been issued by AlmaLinux (cjose, curl, emacs, environment-modules, flatpak, flatpak-builder, gd, glibc, kernel, libxml2, pcre2, and rsyslog), Debian (chromium, keystone, libgi...

📰 Source: LWN.net
🔗 Link: https://lwn.net/Articles/1100181/
Security updates for Tuesday [LWN.net]
lwn.net
October 13, 2026 at 1:14 PM