CVE-2026-101019: Interpretation Conflict

Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libxml2 (UTSA-2026-130065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130065 advisory. In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2026-130042)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130042 advisory. In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. Tenable has extracted the preceding descripti...

PT-2026-113779

Name of the Vulnerable Software and Affected Versions NGINX JavaScript njs affected versions not specified Description The built-in njs engine leaks a libxml2 parser context when the xml.parse function fails because the failure path does not register cleanup, preventing the context from being...

PT-2026-113778

Name of the Vulnerable Software and Affected Versions NGINX JavaScript njs affected versions not specified Description The njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. During the canonicalization process in both the built-in njs and QuickJS...

libxml2 security update

An update is available for libxml2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libxml2 library is a development toolbox providing the implementation of...

RLSA-2026:80675 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 For more details about the security issues, including the impact, a CVSS...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libxml2 vulnerabilities (USN-8910-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8910-1 advisory. Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

MiracleLinux 8 : libxml2-2.9.7-21.el8_10.10 (AXSA:2026-2024:12)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2024:12 advisory. libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 Tenable has extracted the preceding description...

Moderate: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

Security Bulletin: Multiple security vulnerabilities identified in Containerized version of IBM Guardium Key Lifecycle Manager

Summary Multiple security vulnerabilities have been addressed in Containerized version of IBM Guardium Key Lifecycle Manager Vulnerability Details CVEID:CVE-2026-6732 DESCRIPTION: A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema...

ALSA-2026:80675 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 For more details about the security issues, including the impact, a CVSS...

Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation CVE-2026-86142 For more details about the security issues, including the impact, a CVSS...

EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2026-4343)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-4159)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-4068)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

TencentOS Server 3: libxml2 (TSSA-2026:1142)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1142 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2026-4252)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...