libyang vulnerabilities
CVEs whose affected-version data names the libyang package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115327Medium· 5.3libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC Parser
libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non…
▾ SunlitCESNET · libyangEPSS 0.31%via CVEORG
CVE-2026-44673High· 7.5PoClibyang is a YANG data modeling language library
libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attack…
▾ MidnightCESNET · libyangEPSS 0.64%via NVD