Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
xmllint may process crafted XML files unsafely
published 4 days ago
Summary
The xmllint tool that comes with the libxml2 library can be fooled by specially crafted XML files to behave in unintended ways. This could allow an attacker who can supply XML data to cause inappropriate actions on your system. Update libxml2 to the latest version or apply the vendor's recommended patch to protect against this risk.
What to do
- Update cleanstart libxml2 to version 2.12.7-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libxml2 |
< 2.12.7-r0 Fix: upgrade to 2.12.7-r0
|
Original advisory text
issue was discovered in xmllint (from libxml2) before 2
Security vulnerability affects the libxml2 package. An issue was discovered in xmllint (from libxml2) before 2.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2025-ZO88689 · OSV
Track software like this
Free during beta