Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/libxml2@2.7.8
purl pkg:nuget/libxml2@2.7.8
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-axc8-mw7j-7ufg
Aliases:
CVE-2010-4494
Double Free Double free vulnerability in libxml2 and other versions, as used in Google Chrome and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
2.7.8.2
Affected by 48 other vulnerabilities.
VCID-ttud-e3xr-dudd
Aliases:
CVE-2011-1944
Integer Overflow Integer overflow in xpath.c in libxml2, and libxml, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted XML file that triggers a heap-based buffer overflow when adding a new namespace node, related to handling of XPath expressions.
2.7.8.2
Affected by 48 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:46:46.416233+00:00 GitLab Importer Affected by VCID-ttud-e3xr-dudd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2011-1944.yml 38.0.0
2026-04-01T12:46:46.127572+00:00 GitLab Importer Affected by VCID-axc8-mw7j-7ufg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/libxml2/CVE-2010-4494.yml 38.0.0