Known Vulnerabilities for Libxml2 by Na
Listed below are 10 of the newest known vulnerabilities associated with "Libxml2" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101025 json | Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xm... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-101019 json | Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsis... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-86144 json | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has sec... | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86143 json | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach ... | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86142 json | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length... | Not Provided | 2026-09-05 | 2026-09-14 |
| CVE-2026-86141 json | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it doe... | Not Provided | 2026-09-05 | 2026-09-09 |
| CVE-2026-86140 json | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86139 json | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86138 json | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-86137 json | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xml... | Not Provided | 2026-09-05 | 2026-09-14 |