Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libxml2@2.9.1-6.el7?arch=5
purl pkg:rpm/redhat/libxml2@2.9.1-6.el7?arch=5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-782a-uast-nbch
Aliases:
CVE-2019-20388
Multiple vulnerabilities have been found in libxml2, the worst of which could result in a Denial of Service condition. There are no reported fixed by versions.
VCID-qv3r-ppuc-zycz
Aliases:
CVE-2020-7595
GHSA-7553-jr98-vx47
libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. The Nokogiri RubyGem has patched its vendored copy of libxml2 in order to prevent this issue from affecting nokogiri. There are no reported fixed by versions.
VCID-ugyh-dycm-3bc3
Aliases:
CVE-2019-19956
libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:14:29.037923+00:00 RedHat Importer Affected by VCID-ugyh-dycm-3bc3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19956.json 38.0.0
2026-04-01T14:13:52.193115+00:00 RedHat Importer Affected by VCID-qv3r-ppuc-zycz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7595.json 38.0.0
2026-04-01T14:13:51.819339+00:00 RedHat Importer Affected by VCID-782a-uast-nbch https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-20388.json 38.0.0