libnxml vulnerabilities

CVEs whose affected-version data names the libnxml package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-123202High· 7.5

yesterday

libnxml before 0.18.6 Stack-based Buffer Overflow via long multi-byte XML name

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-cha…

▾ Twilightbakulf · libnxmlvia CVEORG