JLSEC-2026-468

In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content by setting "checked". This makes classic XXE attacks possible...

OPENSUSE-SU-2024:11678-1 velocity-custom-parser-example-2.2-1.1 on GA media

These are all security issues fixed in the velocity-custom-parser-example-2.2-1.1 package on the GA media of openSUSE Tumbleweed...

Persisted XSS vulnerability in warnings-ng

warnings-ng rendered the name of a custom warnings parser unescaped on Jenkins web pages. This allowed attackers with Job/Configure permission to define a custom parser whose name included HTML and JavaScript, resulting in a persisted cross-site scripting vulnerability. warnings-ng now properly...

Gemalto's HASP SRM custom XML-parser stack overflow vulnerability

Gemalto is a global leader in digital security, specializing in financial IC cards, payment security, mobile payment solutions, cloud authentication access services, identity and privacy protection, e-healthcare, e-government and other services. A stack overflow vulnerability exists in Gemalto's...