Libxml2 vulnerabilities
We track 1 vulnerability in Libxml2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Libxml2 vulnerabilities
- 9.1 Critical severity
libxml2: Improper Restriction of XML External Entity Reference
In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible.