Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/libxml2@2.10.4-r0?arch=armv7&distroversion=v3.23&reponame=main
purl pkg:apk/alpine/libxml2@2.10.4-r0?arch=armv7&distroversion=v3.23&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-qpnt-xvgv-s3cq This advisory has been invalidated. CVE-2023-28484
VCID-x9ej-7dcq-tub2 Double Free An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value). CVE-2023-29469

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-07T13:57:21.551231+00:00 Alpine Linux Importer Fixing VCID-x9ej-7dcq-tub2 https://secdb.alpinelinux.org/v3.23/main.json 38.1.0
2026-04-03T17:55:32.367598+00:00 Alpine Linux Importer Fixing VCID-qpnt-xvgv-s3cq https://secdb.alpinelinux.org/v3.23/main.json 38.1.0