https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:50:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07164 bdu:2024-07164 https://cve.radiocsirt.org/vuln/bdu:2024-07164 https://cve.radiocsirt.org/vuln/bell-cve-2024-40896 <p><strong>Affected:</strong> Alpaquita:stream: libxml2, BellSoft Hardened Containers:stream: libxml2</p> <p><strong>Affected:</strong> Alpaquita:stream: libxml2, BellSoft Hardened Containers:stream: libxml2</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-40896 https://cve.radiocsirt.org/vuln/bit-java-2024-40896 <p><strong>Affected:</strong> Bitnami: java</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> <p><strong>Affected:</strong> Bitnami: java</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> https://cve.radiocsirt.org/vuln/bit-java-2024-40896 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0320 certfr-2025-avi-0320 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0320 https://cve.radiocsirt.org/vuln/euvd-2026-219884 EUVD-2026-219884 https://cve.radiocsirt.org/vuln/euvd-2026-219884 https://cve.radiocsirt.org/vuln/fkie_cve-2024-40896 <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-40896 https://cve.radiocsirt.org/vuln/ghsa-6c2p-rqx3-w4px <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> https://cve.radiocsirt.org/vuln/ghsa-6c2p-rqx3-w4px https://cve.radiocsirt.org/vuln/msrc_cve-2024-40896 msrc_CVE-2024-40896 https://cve.radiocsirt.org/vuln/msrc_cve-2024-40896 https://cve.radiocsirt.org/vuln/oesa-2024-1950 <p><strong>Affected:</strong> openEuler:24.03-LTS: libxml2</p> <p>This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. Security Fix(es): (CVE-2024-40896)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: libxml2</p> <p>This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. Security Fix(es): (CVE-2024-40896)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1950 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14241-1 <p>libxml2-2-2.12.9-1.1 on GA media</p> <p>libxml2-2-2.12.9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14241-1 https://cve.radiocsirt.org/vuln/suse-su-2025:20116-1 <p>Security update for libxml2</p> <p>Security update for libxml2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:20116-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-40896 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:24.10: libxml2</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:24.10: libxml2</p> <p>In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &#34;checked&#34;). This makes classic XXE attacks possible.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-40896 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3746 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libxml2 ausnutzen, um Dateien zu manipulieren oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libxml2 ausnutzen, um Dateien zu manipulieren oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3746