EUVD-2025-210773

Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...

CVE-2025-71406 Nokogiri before 1.18.4 Use-After-Free via libxslt

Nokogiri before 1.18.4 bundles a vulnerable version of libxslt prior to 1.1.43 that contains two use-after-free vulnerabilities: CVE-2025-24855 use-after-free of the XPath context node due to xsltEvalXPathStringNs leaking xpathCtxt-node and CVE-2024-55549 use-after-free related to excluded result...

CVE-2025-71406

Removed by vendor...

CVE-2022-51000

...

CVE-2022-51000

Nokogiri (Ruby gem) versions before 1.13.2 (CRuby, when using packaged libraries) ship outdated vendored libxml2 2.9.12 and libxslt 1.1.34 . These are vulnerable to two upstream flaws: CVE-2021-30560 in libxslt (CVSS 8.8, DoS via untrusted XSL stylesheets) and CVE-2022-23308 in libxml2 (potential...

CVE-2022-51000

...

CVE-2022-51000 Nokogiri before 1.13.2 Multiple Vulnerabilities via libxml2 libxslt

Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via CVE-2021-30560 in libxslt, an application transforming XML with untrusted XSL stylesheets is vulnerable to a denial-of-service attack. Via...

EUVD-2022-56025

Nokogiri before 1.13.2 CRuby, when using packaged libraries ships vendored libxml2 2.9.12 and libxslt 1.1.34, which are affected by two upstream CVEs. Via CVE-2021-30560 in libxslt, an application transforming XML with untrusted XSL stylesheets is vulnerable to a denial-of-service attack. Via...

CVE-2022-51000

Removed by vendor...

ROOT-OS-DEBIAN-12-CVE-2025-7425 CVE-2025-7425 in libxslt - Patched by Root

Root has patched CVE-2025-7425 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

EulerOS Virtualization 2.13.1 : libxslt (EulerOS-SA-2026-3184)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsin...

EulerOS Virtualization 2.13.0 : libxslt (EulerOS-SA-2026-3224)

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsin...

ROOT-OS-DEBIAN-13-CVE-2025-7425 CVE-2025-7425 in libxslt - Patched by Root

Root has patched CVE-2025-7425 in the libxslt package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:11. Multiple fixed versions available...

UBUNTU-CVE-2026-74971

Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

Photon OS 5.0: Libxslt PHSA-2025-5.0-91-0641

An update of the libxslt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0641. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxslt PHSA-2026-5.0-90-0874

An update of the libxslt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxslt PHSA-2025-5.0-91-0490

An update of the libxslt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0490. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxslt PHSA-2026-5.0-91-0874

An update of the libxslt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS 2.0 SP11 : libxslt (EulerOS-SA-2026-3082)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to...