CVE-2026-97626 Gitea profile feed disclosure bypassing user visibility

Requesting a user or organization profile page GET /username with an Accept: application/rss+xml or Accept: application/atom+xml header returned the owner's activity feed without the visibility check that the profile page and the .rss and .atom routes apply. Anonymous users, restricted users and...

USN-8891-1 librsvg vulnerability

It was discovered that librsvg incorrectly handled duplicate XML entity declarations while processing SVG documents containing nested XML inclusions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

USN-8891-1: librsvg vulnerability

It was discovered that librsvg incorrectly handled duplicate XML entity declarations while processing SVG documents containing nested XML inclusions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

CVE-2026-105868

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105868 Payload: Uploaded XML files could execute same-origin JavaScript

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105868 Payload: Uploaded XML files could execute same-origin JavaScript

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105868

The headless content management system Payload is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . The root cause involves local upload configurations that permit the storage of XML files . An attacker can upload a malicious XML file and stylesheet that execute Ja...

CVE-2026-105868

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

CVE-2026-105868 Payload: Uploaded XML files could execute same-origin JavaScript

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

Security Bulletin: Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in xmldom

Summary Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in xmldom. CVE-2026-83605, CVE-2026-83607, CVE-2026-83608, CVE-2026-83610, CVE-2026-83611, CVE-2026-83613, CVE-2026-83614, CVE-2026-83615, CVE-2026-83616, CVE-2026-83619 The vulnerabilities have been addressed...

CLSA-2026-1791279538 delve: Fix of 5 CVEs

Rebuild with golang 1.25.7-1.el96.tuxcare.els16 to fix the following CVEs - CVE-2026-33818: enforce a maximum recursion depth in encoding/asn1 Unmarshal to prevent stack exhaustion on deeply nested structures - CVE-2026-56859: add a recursion depth guard in encoding/xml so that DecodeElement no...

CLSA-2026-1791254668 Fix CVE(s): CVE-2026-66046, CVE-2026-93990

SECURITY UPDATE: XML injection via malformed UTF-16 input: a high surrogate not followed by a low surrogate is accepted and consumes the following code unit, hiding markup characters from the parser libexpat through 2.8.4 - debian/patches/CVE-2026-93990.patch: reject a UTF-16 high surrogate whose...

CLEANSTART-2026-LD36349 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1

Security vulnerability affects the sonarqube package. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1...

CLEANSTART-2026-LS35751 Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit

Security vulnerability affects the rundeck package. A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit...

CLEANSTART-2026-TW34089 goxmlsig provides XML Digital Signatures implemented in Go

Security vulnerability affects the dex-fips package. goxmlsig provides XML Digital Signatures implemented in Go...

[SECURITY] Fedora 45 Update: ocaml-xml-light-2.5-22.fc45

Xml-Light is a minimal XML parser & printer for OCaml. It provides functions to parse an XML document into an OCaml data structure, work with it, and print it back to an XML document. It also supports DTD parsing and checking, and is entirely written in OCaml; hence it does not require a C librar...

[SECURITY] Fedora 45 Update: ocaml-expat-1.3.0-21.fc45

An ocaml wrapper for the Expat XML parsing library. It allows you to write XML-Parsers using the SAX method. An XML document is parsed on the fly without needing to load the entire XML-Tree into memory...

PT-2026-107540

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.9.0 Description A heap buffer over-read exists in the xmlparse.c file. The XML ParseBuffer function advances the parse buffer end using a caller-supplied length that is not validated against the allocated buffer...