CVE-2025-11731
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-843
- Updated
- 2026-11-06
EUVDEUVD-2025-34140
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
EUVD-2025-34140- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-9f23-58rv-2hx4
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func...
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
GHSA-9f23-58rv-2hx4- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-843
- Updated
- 2026-11-02
NVD
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-843
- Updated
- 2026-11-06
OSVBELL-CVE-2025-11731
- Record
BELL-CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSV
Libxslt: type confusion in exsltfuncresultcompfunction of libxslt
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-843
- Updated
- 2026-11-07
Show 21 moreShow less
OSVDEBIAN-CVE-2025-11731
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
DEBIAN-CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-07
OSVOESA-2026-1724
libxslt security update
Libxslt is the XSLT C library developed for the GNOME project
Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
- Record
OESA-2026-1724- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1725
libxslt security update
Libxslt is the XSLT C library developed for the GNOME project
Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
- Record
OESA-2026-1725- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1726
libxslt security update
Libxslt is the XSLT C library developed for the GNOME project
Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
- Record
OESA-2026-1726- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1727
libxslt security update
Libxslt is the XSLT C library developed for the GNOME project
Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
- Record
OESA-2026-1727- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1728
libxslt security update
Libxslt is the XSLT C library developed for the GNOME project
Security Fix(es):
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.(CVE-2025-11731)
- Record
OESA-2026-1728- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2026:11015
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:11015- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-11731
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
UBUNTU-CVE-2025-11731- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-70550 No score
CVE-2025-11731 affecting package libxslt for versions less than 1.1.34-9
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
AZL-70550- Updated
- 2026-11-02
OSVAZL-70601 No score
CVE-2025-11731 affecting package libxslt for versions less than 1.1.43-3
A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.
- Record
AZL-70601- Updated
- 2026-11-05
OSVopenSUSE-SU-2025:15641-1 No score
libexslt0-1.1.43-4.1 on GA media
These are all security issues fixed in the libexslt0-1.1.43-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15641-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:20050-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
Changes in libxslt:
- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)
- Record
openSUSE-SU-2025:20050-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11147-1 No score
python-lxml-doc-6.1.1-1.1 on GA media
These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11147-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20892-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
- Record
SUSE-SU-2025:20892-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20897-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)
- Record
SUSE-SU-2025:20897-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:21008-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
Changes in libxslt:
- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)
- Record
SUSE-SU-2025:21008-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:21031-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
Changes in libxslt:
- CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)
- Record
SUSE-SU-2025:21031-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3743-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)
- Record
SUSE-SU-2025:3743-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3778-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)
- Record
SUSE-SU-2025:3778-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3875-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979)
- CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
- Record
SUSE-SU-2025:3875-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0603-1 No score
Security update for libxslt
This update for libxslt fixes the following issues:
- CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979)
- CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
- Record
SUSE-SU-2026:0603-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libxsltAzure Linux:2 |
before 1.1.34-9 | 1.1.34-9 |
libxsltAzure Linux:3 |
before 1.1.43-3 | 1.1.43-3 |
libxsltAlpaquita:23 |
1.1.37-r0 up to 1.1.37-r3 | 1.1.37-r3 |
libxsltAlpaquita:25 |
1.1.43-r0 up to 1.1.43-r1 | 1.1.43-r1 |
libxsltAlpaquita:stream |
1.1.37-r0 up to 1.1.43-r1 | 1.1.43-r1 |
libxsltBellSoft Hardened Containers:23 |
1.1.37-r0 up to 1.1.37-r3 | 1.1.37-r3 |
libxsltBellSoft Hardened Containers:25 |
1.1.43-r0 up to 1.1.43-r1 | 1.1.43-r1 |
libxsltBellSoft Hardened Containers:stream |
1.1.37-r0 up to 1.1.43-r1 | 1.1.43-r1 |
libxsltDebian:12 |
All versions, plus listed versions 1.1.35-11.1.35-1+deb12u11.1.35-1+deb12u21.1.35-1+deb12u31.1.35-1+deb12u4 Show 9 moreShow less1.1.35-1.11.1.35-1.21.1.35-21.1.39-0exp11.1.43-0.11.1.43-0.21.1.43-0.31.1.43-0exp11.1.45-0.1 |
None known |
libxsltDebian:13 |
All versions, plus listed versions 1.1.35-1.21.1.35-1.2+deb13u11.1.35-1.2+deb13u21.1.35-1.2+deb13u31.1.35-2 Show 6 moreShow less1.1.39-0exp11.1.43-0.11.1.43-0.21.1.43-0.31.1.43-0exp11.1.45-0.1 |
None known |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libxsltDebian:14 |
before 1.1.43-0.3, plus listed versions 1.1.35-1.21.1.35-21.1.39-0exp11.1.43-0.11.1.43-0.21.1.43-0exp1 |
1.1.43-0.3 |
libxsltopenEuler:20.03-LTS-SP4 |
before 1.1.34-13.oe2003sp4 | 1.1.34-13.oe2003sp4 |
libxsltopenEuler:22.03-LTS-SP4 |
before 1.1.37-7.oe2203sp4 | 1.1.37-7.oe2203sp4 |
libxsltopenEuler:24.03-LTS |
before 1.1.39-7.oe2403 | 1.1.39-7.oe2403 |
libxsltopenEuler:24.03-LTS-SP1 |
before 1.1.39-7.oe2403sp1 | 1.1.39-7.oe2403sp1 |
libxsltopenEuler:24.03-LTS-SP2 |
before 1.1.39-7.oe2403sp2 | 1.1.39-7.oe2403sp2 |
libxsltRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.1.45-0.1.hum1 | 0:1.1.45-0.1.hum1 |
libxslt-develRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.1.45-0.1.hum1 | 0:1.1.45-0.1.hum1 |
python3-libxsltRed Hat:hummingbird:1 From an advisory covering 3 CVEs |
before 0:1.1.45-0.1.hum1 | 0:1.1.45-0.1.hum1 |
libxsltSUSE:Linux Micro 6.0 From an advisory covering 2 CVEs |
before 1.1.38-7.1 | 1.1.38-7.1 |
libxsltSUSE:Linux Micro 6.1 From an advisory covering 2 CVEs |
before 1.1.38-slfo.1.1_5.1 | 1.1.38-slfo.1.1_5.1 |
libxsltSUSE:Linux Enterprise Server 16.0 From an advisory covering 2 CVEs |
before 1.1.43-160000.3.1 | 1.1.43-160000.3.1 |
libxsltSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 2 CVEs |
before 1.1.43-160000.3.1 | 1.1.43-160000.3.1 |
libxsltSUSE:Linux Micro 6.2 From an advisory covering 2 CVEs |
before 1.1.43-160000.3.1 | 1.1.43-160000.3.1 |
libxsltSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Linux Enterprise Micro 5.1 |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Linux Enterprise Micro 5.2 |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Enterprise Storage 7.1 |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxslt-pythonopenSUSE:Leap 15.6 |
before 1.1.32-150000.3.28.1 | 1.1.32-150000.3.28.1 |
libxsltSUSE:Linux Enterprise Server 12 SP5-LTSS |
before 1.1.28-17.21.1 | 1.1.28-17.21.1 |
libxsltSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 1.1.28-17.21.1 | 1.1.28-17.21.1 |
libxsltSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Module for Package Hub 15 SP7 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.1.34-150400.3.13.1 | 1.1.34-150400.3.13.1 |
libxsltUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.1.28-21.1.28-2build11.1.28-2ubuntu0.11.1.28-2ubuntu0.21.1.28-2ubuntu0.2+esm1 Show 4 moreShow less1.1.28-2ubuntu0.2+esm21.1.28-2ubuntu0.2+esm31.1.28-2ubuntu0.2+esm41.1.28-2ubuntu0.2+esm5 |
None known |
libxsltUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.1.28-2build21.1.28-2.11.1.28-2.1ubuntu0.11.1.28-2.1ubuntu0.21.1.28-2.1ubuntu0.3 Show 4 moreShow less1.1.28-2.1ubuntu0.3+esm11.1.28-2.1ubuntu0.3+esm21.1.28-2.1ubuntu0.3+esm31.1.28-2.1ubuntu0.3+esm4 |
None known |
libxsltUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.1.29-2.1ubuntu11.1.29-41.1.29-51.1.29-5ubuntu0.11.1.29-5ubuntu0.2 Show 4 moreShow less1.1.29-5ubuntu0.31.1.29-5ubuntu0.3+esm11.1.29-5ubuntu0.3+esm21.1.29-5ubuntu0.3+esm3 |
None known |
libxsltUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.1.33-0ubuntu11.1.33-0ubuntu21.1.33-0ubuntu31.1.34-11.1.34-1ubuntu1 Show 7 moreShow less1.1.34-31.1.34-41.1.34-4ubuntu0.20.04.11.1.34-4ubuntu0.20.04.21.1.34-4ubuntu0.20.04.31.1.34-4ubuntu0.20.04.3+esm11.1.34-4ubuntu0.20.04.3+esm2 |
None known |
libxsltUbuntu:22.04:LTS |
All versions, plus listed versions 1.1.34-41.1.34-4build11.1.34-4build21.1.34-4ubuntu0.22.04.11.1.34-4ubuntu0.22.04.21.1.34-4ubuntu0.22.04.31.1.34-4ubuntu0.22.04.41.1.34-4ubuntu0.22.04.5 |
None known |
libxsltUbuntu:24.04:LTS |
All versions, plus listed versions 1.1.35-11.1.39-0exp11.1.39-0exp1build11.1.39-0exp1ubuntu0.24.04.11.1.39-0exp1ubuntu0.24.04.21.1.39-0exp1ubuntu0.24.04.3 |
None known |
libxsltUbuntu:25.10 |
All versions, plus listed versions 1.1.39-0exp1ubuntu41.1.43-0exp11.1.43-0.1 |
None known |
libxsltUbuntu:26.04:LTS |
before 1.1.43-0.3, plus listed versions 1.1.43-0.1 |
1.1.43-0.3 |
libxsltopenSUSE:Tumbleweed |
before 1.1.43-4.1 | 1.1.43-4.1 |
libxsltopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 1.1.43-160000.3.1 | 1.1.43-160000.3.1 |
python-lxmlopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 6.1.1-1.1 | 6.1.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-11731 is a low vulnerability (CVSS 3.1) in Red Hat Enterprise Linux 10, published October 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in libxslt 1.1.34-9.
References
access.redhat.com/errata/RHSA-2026:11015
bugzilla.redhat.com/show_bug.cgi?id=2403688
gitlab.gnome.org/GNOME/libxslt/-/issues/151
nvd.nist.gov/vuln/detail/CVE-2025-11731
Show 42 moreShow less
github.com/advisories/GHSA-9f23-58rv-2hx4
docs.bell-sw.com/security/cves/CVE-2025-11731
catalog.redhat.com/software/containers
security-tracker.debian.org/tracker/CVE-2025-11731
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1724
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11015.json
cve.org/CVERecord?id=CVE-2025-7424
suse.com/support/update/announcement/2025/suse-su-202520892-1
bugzilla.suse.com/1250553
ubuntu.com/security/CVE-2025-11731