Search for packages
| purl | pkg:deb/debian/libxslt@1.1.34-4%2Bdeb11u1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-aauj-xkdy-mbea
Aliases: CVE-2025-7424 |
libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes |
Affected by 2 other vulnerabilities. |
|
VCID-gz4b-hjbg-pyfz
Aliases: CVE-2025-10911 |
libxslt: use-after-free with key data stored cross-RVT |
Affected by 1 other vulnerability. |
|
VCID-jaep-1ut3-9qan
Aliases: CVE-2025-24855 |
libxslt: Use-After-Free in libxslt numbers.c |
Affected by 2 other vulnerabilities. |
|
VCID-qpxw-q3mc-xfhz
Aliases: CVE-2025-11731 |
libxslt: Type Confusion in exsltFuncResultCompfunction of libxslt |
Affected by 1 other vulnerability. |
|
VCID-wdxa-4bjj-7fe5
Aliases: CVE-2023-40403 |
libxslt: Processing web content may disclose sensitive information |
Affected by 2 other vulnerabilities. |
|
VCID-z7hh-qpzy-c7b2
Aliases: CVE-2024-55549 |
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-nxyn-eknv-tqbf | Use After Free Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30560
GHSA-59gp-qqm7-cw4j |
| VCID-sxp3-vtcq-pugw | Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed. Nokogiri prior to version 1.10.5 contains a vulnerable version of libxslt. Nokogiri version 1.10.5 upgrades the dependency to libxslt 1.1.34, which contains a patch for this issue. |
CVE-2019-18197
GHSA-242x-7cm6-4w8j |
| VCID-zwzs-qztz-wbfj | Multiple vulnerabilities have been found in Chromium and Google Chrome, the worst of which could allow remote attackers to execute arbitrary code. |
CVE-2019-5815
GHSA-vmfx-gcfq-wvm2 |