CVE-2026-86144

A flaw was found in libxml2's xinclude processing. The xmlXIncludeProcess and xmlXIncludeProcessTree functions fail to propagate parseFlags, such as XMLPARSENONET. This oversight can allow a custom resource loader to access external internet resources, potentially leading to XML external entity X...