884 matches found
CVE-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...
EUVD-2001-0126
Malware in sbrugna...
EUVD-2009-1089
Malware in sbrugna...
EUVD-2010-0345
Malware in sbrugna...
EUVD-2010-0200
Malware in sbrugna...
EUVD-2012-0095
Malware in sbrugna...
EUVD-2016-9824
Malware in sbrugna...
EUVD-2016-5324
Malware in sbrugna...
EUVD-2016-2659
Malware in sbrugna...
EUVD-2002-0168
Malware in sbrugna...
EUVD-2010-0679
Malware in sbrugna...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987442)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987442 advisory. XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox 141, Firefox ESR 128.13, Firefox ESR...
LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...
CVE-2025-6985
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
CVE-2025-6985
The CVE-2025-6985 entry concerns LangChain Text Splitters (langchain-text-splitters) v0.3.8, with an XML External Entity (XXE) risk due to unsafe XSLT parsing. The connected docs explain that arbitrary XSLT stylesheets are parsed using lxml.etree.parse() and lxml.etree.XSLT() without hardening, a...
libxslt security update
An update is available for libxslt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libxslt is a library for transforming XML files into other textual formats...
EUVD-2025-28467
Malicious code in bioql PyPI...
EUVD-2022-5013
Malicious code in bioql PyPI...