Every CVE Search/ Get API key

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...

7.8 HighFix available

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.36%Up 0.3 points since Mar 14, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2025-7659 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
EUVD-2025-7659
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3cgj-v3m4-cgcq 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
GHSA-3cgj-v3m4-cgcq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2025-24855 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
ALPINE-CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-24855 7.8
Record
BELL-CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 41 moreShow less
OSV 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2025-24855 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
DEBIAN-CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVJLSEC-2026-583 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
JLSEC-2026-583
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1296 7.8

libxslt security update

Libxslt is the XSLT C library developed for the GNOME project

Security Fix(es):

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.(CVE-2024-55549)

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.(CVE-2025-24855)

Record
OESA-2025-1296
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3107 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3107
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3389 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3389
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3528 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3528
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3612 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3612
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3615 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3615
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3619 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3619
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3624 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3624
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3625 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3625
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3626 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3626
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:3627 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:3627
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4098 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:4098
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:7496 7.8

Red Hat Security Advisory: libxslt security update

Record
RHSA-2025:7496
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:3615 7.8

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

  • libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:3615
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:7496 7.8

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

  • libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:7496
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-24855 7.8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
UBUNTU-CVE-2025-24855
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:3107 No score

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:3107
Updated
2026-11-02
OSVALSA-2025:3615 No score

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)
  • libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:3615
Updated
2026-11-02
OSVALSA-2025:7496 No score

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

  • libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)
  • libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:7496
Updated
2026-11-02
OSVAZL-58644 No score

CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
AZL-58644
Updated
2026-11-02
OSVAZL-58665 No score

CVE-2025-24855 affecting package libxslt for versions less than 1.1.43-1

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
AZL-58665
Updated
2026-11-02
OSVBIT-java-2025-24855 No score

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
BIT-java-2025-24855
Updated
2026-11-02
OSVBIT-java-min-2025-24855 No score

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
BIT-java-min-2025-24855
Updated
2026-11-02
OSVBIT-jre-2025-24855 No score

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.

Record
BIT-jre-2025-24855
Updated
2026-11-02
OSVCLSA-2025-1743763948 No score

libxslt: Fix of CVE-2025-24855

  • CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath context node in nested XPath evaluations
Record
CLSA-2025-1743763948
Updated
2026-11-02
OSVCLSA-2025-1745587914 No score

libxslt: Fix of CVE-2025-24855

  • CVE-2025-24855: fix use-after-free of XPath context node
Record
CLSA-2025-1745587914
Updated
2026-11-02
OSVCLSA-2026-1788275913 No score

Fix CVE(s): CVE-2025-24855

  • SECURITY UPDATE: use-after-free of the XPath context node
    • debian/patches/CVE-2025-24855.patch: restore the XPath context node after modifying it in libxslt/numbers.c, libxslt/templates.c and libxslt/xsltutils.c.
    • CVE-2025-24855
Record
CLSA-2026-1788275913
Updated
2026-11-02
OSVCLSA-2026-1792507096 No score

libxslt: Fix of 6 CVEs

  • CVE-2019-11068: fix security framework bypass in xsltCheckRead and xsltCheckWrite callers
  • CVE-2019-18197: fix dangling pointer in xsltCopyText
  • CVE-2019-5815: always set context node before calling XPath iterators
  • CVE-2021-30560: fix use-after-free in xsltApplyTemplates
  • CVE-2024-55549: fix use-after-free related to excluded namespaces
  • CVE-2025-24855: fix use-after-free of XPath context node in nested XPath evaluations
Record
CLSA-2026-1792507096
Updated
2026-11-02
OSVMGASA-2025-0110 No score

Updated libxslt packages fix security vulnerabilities

xsltGetInheritedNsList in libxslt has a use-after-free issue related to exclusion of result prefixes (CVE-2024-55549). numbers.c in libxslt has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal (CVE-2025-24855).

Record
MGASA-2025-0110
Updated
2026-11-02
OSVopenSUSE-SU-2025:14894-1 No score

libexslt0-1.1.43-1.1 on GA media

These are all security issues fixed in the libexslt0-1.1.43-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14894-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15531-1 No score

libQt5Pdf5-5.15.19-1.1 on GA media

These are all security issues fixed in the libQt5Pdf5-5.15.19-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15531-1
Updated
2026-11-02
OSVSUSE-SU-2025:1003-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)
  • CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)
  • CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)
Record
SUSE-SU-2025:1003-1
Updated
2026-11-02
OSVSUSE-SU-2025:1125-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)
  • CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)
  • CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)
Record
SUSE-SU-2025:1125-1
Updated
2026-11-02
OSVSUSE-SU-2025:1494-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2025-24855: Fixed use-after-free of XPath context node (bsc#1239625)
  • CVE-2024-55549: Fixed use-after-free related to excluded namespaces (bsc#1239637)
Record
SUSE-SU-2025:1494-1
Updated
2026-11-02
OSVSUSE-SU-2025:20201-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)
  • CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)
  • CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)
Record
SUSE-SU-2025:20201-1
Updated
2026-11-02
OSVSUSE-SU-2025:20277-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

  • CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)
  • CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)
  • CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)
Record
SUSE-SU-2025:20277-1
Updated
2026-11-02
OSVUSN-7361-1 No score

libxslt vulnerability

Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-7361-1
Updated
2026-11-02
OSVUSN-7787-1 No score

libxslt vulnerabilities

Ivan Fratric discovered that Libxslt did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.

Record
USN-7787-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libxslt
Alpine:v3.18
 before 1.1.38-r1
1.1.38-r1
libxslt
Alpine:v3.19
 before 1.1.39-r1
1.1.39-r1
libxslt
Alpine:v3.20
 before 1.1.39-r2
1.1.39-r2
libxslt
Alpine:v3.21
 before 1.1.42-r2
1.1.42-r2
libxslt
Alpine:v3.22
 before 1.1.43-r0
1.1.43-r0
libxslt
Alpine:v3.23
 before 1.1.43-r0
1.1.43-r0
libxslt
Alpine:v3.24
 before 1.1.43-r0
1.1.43-r0
qt5-qtwebengine
Alpine:v3.21
 before 5.15.17-r7
5.15.17-r7
qt5-qtwebengine
Alpine:v3.22
 before 5.15.17-r10
5.15.17-r10
qt5-qtwebengine
Alpine:v3.23
 before 5.15.17-r10
5.15.17-r10
Show 242 moreShow less
Affected packages
PackageAffectedFixed
qt6-qtwebengine
Alpine:v3.22
 before 6.8.2-r3
6.8.2-r3
qt6-qtwebengine
Alpine:v3.23
 before 6.8.2-r3
6.8.2-r3
qt6-qtwebengine
Alpine:v3.24
 before 6.8.2-r3
6.8.2-r3
libxslt
AlmaLinux:9
 before 1.1.34-9.el9_5.1
1.1.34-9.el9_5.1
libxslt-devel
AlmaLinux:9
 before 1.1.34-9.el9_5.1
1.1.34-9.el9_5.1
libxslt
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.32-6.1.el8_10
1.1.32-6.1.el8_10
libxslt-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.32-6.1.el8_10
1.1.32-6.1.el8_10
libxslt
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.1.39-7.el10_0
1.1.39-7.el10_0
libxslt-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.1.39-7.el10_0
1.1.39-7.el10_0
libxslt
Azure Linux:2
 before 1.1.34-8
1.1.34-8
libxslt
Azure Linux:3
 before 1.1.43-1
1.1.43-1
libxslt
Alpaquita:23
 1.1.37-r0 up to 1.1.37-r2
1.1.37-r2
openjdk11
Alpaquita:23
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-container-jre
Alpaquita:23
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
Alpaquita:23
 11.0.19_p7-r1 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-perf
Alpaquita:23
 11.0.20.1_p1-r0 up to 11.0.28_p13-r0
11.0.28_p13-r0
openjdk17
Alpaquita:23
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-container-jre
Alpaquita:23
 17.0.7_p7-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
Alpaquita:23
 17.0.13_p13-r0 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
Alpaquita:23
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21
Alpaquita:23
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-container-jre
Alpaquita:23
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
Alpaquita:23
 21.0.5_p12-r0 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
Alpaquita:23
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24
Alpaquita:23
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-container-jre
Alpaquita:23
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
Alpaquita:23
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
Alpaquita:23
 8u372_p7-r0 up to 8.462_p11-r0
8.462_p11-r0
openjdk8-perf
Alpaquita:23
 8u392_p9-r1 up to 8.462_p12-r0
8.462_p12-r0
openjdk11
Alpaquita:25
 11.0.27_p9-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-container-jre
Alpaquita:25
 11.0.27_p9-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
Alpaquita:25
 11.0.27_p9-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk17
Alpaquita:25
 17.0.15_p10-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-container-jre
Alpaquita:25
 17.0.15_p10-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
Alpaquita:25
 17.0.15_p13-r1 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
Alpaquita:25
 17.0.15_p10-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21
Alpaquita:25
 21.0.7_p9-r1 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-container-jre
Alpaquita:25
 21.0.7_p9-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
Alpaquita:25
 21.0.7_p12-r1 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
Alpaquita:25
 21.0.7_p9-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24
Alpaquita:25
 24.0.1_p11-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-container-jre
Alpaquita:25
 24.0.1_p11-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
Alpaquita:25
 24.0.1_p11-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
Alpaquita:25
 8.452_p11-r0 up to 8.462_p11-r0
8.462_p11-r0
libxslt
Alpaquita:stream
 1.1.37-r0 up to 1.1.43-r0
1.1.43-r0
openjdk11
Alpaquita:stream
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-container-jre
Alpaquita:stream
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
Alpaquita:stream
 11.0.19_p7-r1 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk17
Alpaquita:stream
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-container-jre
Alpaquita:stream
 17.0.7_p7-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
Alpaquita:stream
 17.0.10_p13-r0 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
Alpaquita:stream
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21
Alpaquita:stream
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-container-jre
Alpaquita:stream
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
Alpaquita:stream
 21.0.2_p15-r0 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
Alpaquita:stream
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24
Alpaquita:stream
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-container-jre
Alpaquita:stream
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
Alpaquita:stream
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
Alpaquita:stream
 8u372_p7-r1 up to 8.462_p11-r0
8.462_p11-r0
libxslt
BellSoft Hardened Containers:23
 1.1.37-r0 up to 1.1.37-r2
1.1.37-r2
openjdk11-container-jre
BellSoft Hardened Containers:23
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
BellSoft Hardened Containers:23
 11.0.19_p7-r1 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-perf
BellSoft Hardened Containers:23
 11.0.20.1_p1-r0 up to 11.0.28_p13-r0
11.0.28_p13-r0
openjdk17-container-jre
BellSoft Hardened Containers:23
 17.0.7_p7-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
BellSoft Hardened Containers:23
 17.0.13_p13-r0 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
BellSoft Hardened Containers:23
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21-container-jre
BellSoft Hardened Containers:23
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
BellSoft Hardened Containers:23
 21.0.5_p12-r0 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
BellSoft Hardened Containers:23
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24-container-jre
BellSoft Hardened Containers:23
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
BellSoft Hardened Containers:23
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
BellSoft Hardened Containers:23
 8u372_p7-r0 up to 8.462_p11-r0
8.462_p11-r0
openjdk8-perf
BellSoft Hardened Containers:23
 8u392_p9-r1 up to 8.462_p12-r0
8.462_p12-r0
openjdk11-container-jre
BellSoft Hardened Containers:25
 11.0.27_p9-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
BellSoft Hardened Containers:25
 11.0.27_p9-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk17-container-jre
BellSoft Hardened Containers:25
 17.0.15_p10-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
BellSoft Hardened Containers:25
 17.0.15_p13-r1 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
BellSoft Hardened Containers:25
 17.0.15_p10-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21-container-jre
BellSoft Hardened Containers:25
 21.0.7_p9-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
BellSoft Hardened Containers:25
 21.0.7_p12-r1 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
BellSoft Hardened Containers:25
 21.0.7_p9-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24-container-jre
BellSoft Hardened Containers:25
 24.0.1_p11-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
BellSoft Hardened Containers:25
 24.0.1_p11-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
BellSoft Hardened Containers:25
 8.452_p11-r0 up to 8.462_p11-r0
8.462_p11-r0
libxslt
BellSoft Hardened Containers:stream
 1.1.37-r0 up to 1.1.43-r0
1.1.43-r0
openjdk11-container-jre
BellSoft Hardened Containers:stream
 11.0.19_p7-r0 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk11-lite
BellSoft Hardened Containers:stream
 11.0.19_p7-r1 up to 11.0.28_p12-r0
11.0.28_p12-r0
openjdk17-container-jre
BellSoft Hardened Containers:stream
 17.0.7_p7-r0 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk17-crac
BellSoft Hardened Containers:stream
 17.0.10_p13-r0 up to 17.0.16_p13-r0
17.0.16_p13-r0
openjdk17-lite
BellSoft Hardened Containers:stream
 17.0.7_p7-r1 up to 17.0.16_p12-r0
17.0.16_p12-r0
openjdk21-container-jre
BellSoft Hardened Containers:stream
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk21-crac
BellSoft Hardened Containers:stream
 21.0.2_p15-r0 up to 21.0.8_p13-r0
21.0.8_p13-r0
openjdk21-lite
BellSoft Hardened Containers:stream
 21_p37-r0 up to 21.0.8_p12-r0
21.0.8_p12-r0
openjdk24-container-jre
BellSoft Hardened Containers:stream
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk24-lite
BellSoft Hardened Containers:stream
 24_p37-r0 up to 24.0.2_p12-r0
24.0.2_p12-r0
openjdk8
BellSoft Hardened Containers:stream
 8u372_p7-r1 up to 8.462_p11-r0
8.462_p11-r0
java
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
java-min
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
jre
Bitnami
 before 1.8.0, 1.9.0 up to 8.0.461
1.8.08.0.461
libxslt
TuxCare:CentOS:7
 before 1.1.28-6.el7.tuxcare.els2
1.1.28-6.el7.tuxcare.els2
libxslt-devel
TuxCare:CentOS:7
 before 1.1.28-6.el7.tuxcare.els2
1.1.28-6.el7.tuxcare.els2
libxslt-python
TuxCare:CentOS:7
 before 1.1.28-6.el7.tuxcare.els2
1.1.28-6.el7.tuxcare.els2
libxslt
TuxCare:AlmaLinux:9.2
 before 1.1.34-9.el9.tuxcare.els2
1.1.34-9.el9.tuxcare.els2
libxslt-devel
TuxCare:AlmaLinux:9.2
 before 1.1.34-9.el9.tuxcare.els2
1.1.34-9.el9.tuxcare.els2
libxslt1-dev
TuxCare:Ubuntu:18.04
 before 1.1.29-5ubuntu0.3+tuxcare.els2
1.1.29-5ubuntu0.3+tuxcare.els2
libxslt1.1
TuxCare:Ubuntu:18.04
 before 1.1.29-5ubuntu0.3+tuxcare.els2
1.1.29-5ubuntu0.3+tuxcare.els2
python-libxslt1
TuxCare:Ubuntu:18.04
 before 1.1.29-5ubuntu0.3+tuxcare.els2
1.1.29-5ubuntu0.3+tuxcare.els2
xsltproc
TuxCare:Ubuntu:18.04
 before 1.1.29-5ubuntu0.3+tuxcare.els2
1.1.29-5ubuntu0.3+tuxcare.els2
libxslt
TuxCare:CentOS:6
From an advisory covering 6 CVEs
 before 1.1.26-2.el6_3.1.tuxcare.els1
1.1.26-2.el6_3.1.tuxcare.els1
libxslt-devel
TuxCare:CentOS:6
From an advisory covering 6 CVEs
 before 1.1.26-2.el6_3.1.tuxcare.els1
1.1.26-2.el6_3.1.tuxcare.els1
libxslt-python
TuxCare:CentOS:6
From an advisory covering 6 CVEs
 before 1.1.26-2.el6_3.1.tuxcare.els1
1.1.26-2.el6_3.1.tuxcare.els1
libxslt
Debian:12
 before 1.1.35-1+deb12u1, plus listed versions
1.1.35-1
1.1.35-1+deb12u1
libxslt
Debian:13
 before 1.1.35-1.2
1.1.35-1.2
libxslt
Debian:14
 before 1.1.35-1.2
1.1.35-1.2
libxslt
Debian:11
From an advisory covering 2 CVEs
 before 1.1.34-4+deb11u2, plus listed versions
1.1.34-41.1.34-4+deb11u1
1.1.34-4+deb11u2
libxslt
Debian:12
From an advisory covering 2 CVEs
 before 1.1.35-1+deb12u1, plus listed versions
1.1.35-1
1.1.35-1+deb12u1
XSLT_jll
Julia
 before 1.1.43+0
1.1.43+0
libxslt
Mageia:9
From an advisory covering 2 CVEs
 before 1.1.38-1.1.mga9
1.1.38-1.1.mga9
libxslt
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 1.1.37-2.oe2203sp4
1.1.37-2.oe2203sp4
libxslt
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 1.1.39-3.oe2403sp1
1.1.39-3.oe2403sp1
libxslt
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.1.39-3.oe2403sp1
1.1.39-3.oe2403sp1
libxslt
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 1.1.34-7.oe2003sp4
1.1.34-7.oe2003sp4
libxslt
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 1.1.37-2.oe2203sp3
1.1.37-2.oe2203sp3
libxslt
Red Hat:enterprise_linux:9::appstream
 before 0:1.1.34-9.el9_5.1
0:1.1.34-9.el9_5.1
libxslt-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.1.34-9.el9_5.1
0:1.1.34-9.el9_5.1
libxslt-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.1.34-9.el9_5.1
0:1.1.34-9.el9_5.1
libxslt-devel
Red Hat:enterprise_linux:9::appstream
 before 0:1.1.34-9.el9_5.1
0:1.1.34-9.el9_5.1
libxslt
Red Hat:rhel_eus:9.4::appstream
 before 0:1.1.34-10.el9_4
0:1.1.34-10.el9_4
libxslt-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:1.1.34-10.el9_4
0:1.1.34-10.el9_4
libxslt-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:1.1.34-10.el9_4
0:1.1.34-10.el9_4
libxslt-devel
Red Hat:rhel_eus:9.4::appstream
 before 0:1.1.34-10.el9_4
0:1.1.34-10.el9_4
libxslt
Red Hat:rhel_eus:9.2::appstream
 before 0:1.1.34-10.el9_2
0:1.1.34-10.el9_2
libxslt-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 0:1.1.34-10.el9_2
0:1.1.34-10.el9_2
libxslt-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 0:1.1.34-10.el9_2
0:1.1.34-10.el9_2
libxslt-devel
Red Hat:rhel_eus:9.2::appstream
 before 0:1.1.34-10.el9_2
0:1.1.34-10.el9_2
libxslt-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt-debuginfo
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt-debugsource
Red Hat:rhel_aus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-6.el8_2
0:1.1.32-6.el8_2
libxslt-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt-debugsource
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_8
0:1.1.32-8.el8_8
libxslt-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-devel
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-devel
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-devel
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_aus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_e4s:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debugsource
Red Hat:rhel_tus:8.6::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_6
0:1.1.32-8.el8_6
libxslt-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-devel
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-devel
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-devel
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debuginfo
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_aus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debuginfo
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_e4s:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debuginfo
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt-debugsource
Red Hat:rhel_tus:8.4::baseos
From an advisory covering 2 CVEs
 before 0:1.1.32-8.el8_4
0:1.1.32-8.el8_4
libxslt
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.1.34-11.el9_0
0:1.1.34-11.el9_0
libxslt-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.1.34-11.el9_0
0:1.1.34-11.el9_0
libxslt-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.1.34-11.el9_0
0:1.1.34-11.el9_0
libxslt-devel
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:1.1.34-11.el9_0
0:1.1.34-11.el9_0
libxslt
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:1.1.28-9.el7_9
0:1.1.28-9.el7_9
libxslt-debuginfo
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:1.1.28-9.el7_9
0:1.1.28-9.el7_9
libxslt-devel
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:1.1.28-9.el7_9
0:1.1.28-9.el7_9
libxslt-python
Red Hat:rhel_els:7
From an advisory covering 2 CVEs
 before 0:1.1.28-9.el7_9
0:1.1.28-9.el7_9
libxslt
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.1.39-7.el10_0
0:1.1.39-7.el10_0
libxslt-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.1.39-7.el10_0
0:1.1.39-7.el10_0
libxslt-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.1.39-7.el10_0
0:1.1.39-7.el10_0
libxslt-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.1.39-7.el10_0
0:1.1.39-7.el10_0
libxslt
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1.32-6.1.el8_10
0:1.1.32-6.1.el8_10
libxslt
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:1.1.39-7.el10_0
0:1.1.39-7.el10_0
libxslt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt-python
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 1.1.32-150000.3.17.1
1.1.32-150000.3.17.1
libxslt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Manager Proxy 4.3
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Manager Server 4.3
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 1.1.34-150400.3.6.1
1.1.34-150400.3.6.1
libxslt
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
 before 1.1.28-17.18.1
1.1.28-17.18.1
libxslt
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 1.1.28-17.18.1
1.1.28-17.18.1
libxslt
SUSE:Linux Micro 6.0
From an advisory covering 3 CVEs
 before 1.1.38-4.1
1.1.38-4.1
libxslt
SUSE:Linux Micro 6.1
From an advisory covering 3 CVEs
 before 1.1.38-slfo.1.1_2.1
1.1.38-slfo.1.1_2.1
libxslt
Ubuntu:Pro:14.04:LTS
 before 1.1.28-2ubuntu0.2+esm4, plus listed versions
1.1.28-21.1.28-2build11.1.28-2ubuntu0.11.1.28-2ubuntu0.21.1.28-2ubuntu0.2+esm11.1.28-2ubuntu0.2+esm21.1.28-2ubuntu0.2+esm3
1.1.28-2ubuntu0.2+esm4
libxslt
Ubuntu:Pro:16.04:LTS
 before 1.1.28-2.1ubuntu0.3+esm3, plus listed versions
1.1.28-2build21.1.28-2.11.1.28-2.1ubuntu0.11.1.28-2.1ubuntu0.21.1.28-2.1ubuntu0.31.1.28-2.1ubuntu0.3+esm11.1.28-2.1ubuntu0.3+esm2
1.1.28-2.1ubuntu0.3+esm3
libxslt
Ubuntu:Pro:18.04:LTS
 before 1.1.29-5ubuntu0.3+esm2, plus listed versions
1.1.29-2.1ubuntu11.1.29-41.1.29-51.1.29-5ubuntu0.11.1.29-5ubuntu0.21.1.29-5ubuntu0.31.1.29-5ubuntu0.3+esm1
1.1.29-5ubuntu0.3+esm2
libxslt
Ubuntu:20.04:LTS
 before 1.1.34-4ubuntu0.20.04.3, plus listed versions
1.1.33-0ubuntu11.1.33-0ubuntu21.1.33-0ubuntu31.1.34-11.1.34-1ubuntu1
Show 4 moreShow less
1.1.34-31.1.34-41.1.34-4ubuntu0.20.04.11.1.34-4ubuntu0.20.04.2
1.1.34-4ubuntu0.20.04.3
libxslt
Ubuntu:22.04:LTS
 before 1.1.34-4ubuntu0.22.04.3, plus listed versions
1.1.34-41.1.34-4build11.1.34-4build21.1.34-4ubuntu0.22.04.11.1.34-4ubuntu0.22.04.2
1.1.34-4ubuntu0.22.04.3
libxslt
Ubuntu:24.04:LTS
 before 1.1.39-0exp1ubuntu0.24.04.2, plus listed versions
1.1.35-11.1.39-0exp11.1.39-0exp1build11.1.39-0exp1ubuntu0.24.04.1
1.1.39-0exp1ubuntu0.24.04.2
libxslt
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 1.1.28-2ubuntu0.2+esm4, plus listed versions
1.1.28-21.1.28-2build11.1.28-2ubuntu0.11.1.28-2ubuntu0.21.1.28-2ubuntu0.2+esm11.1.28-2ubuntu0.2+esm21.1.28-2ubuntu0.2+esm3
1.1.28-2ubuntu0.2+esm4
libxslt
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 1.1.28-2.1ubuntu0.3+esm3, plus listed versions
1.1.28-2build21.1.28-2.11.1.28-2.1ubuntu0.11.1.28-2.1ubuntu0.21.1.28-2.1ubuntu0.31.1.28-2.1ubuntu0.3+esm11.1.28-2.1ubuntu0.3+esm2
1.1.28-2.1ubuntu0.3+esm3
libxslt
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 1.1.29-5ubuntu0.3+esm2, plus listed versions
1.1.29-2.1ubuntu11.1.29-41.1.29-51.1.29-5ubuntu0.11.1.29-5ubuntu0.21.1.29-5ubuntu0.31.1.29-5ubuntu0.3+esm1
1.1.29-5ubuntu0.3+esm2
libxslt
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.1.43-1.1
1.1.43-1.1
libqt5-qtwebengine
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 5.15.19-1.1
5.15.19-1.1

History

History
RecordedChangedSources
affected, facts
affectedOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-24855 is a high vulnerability (CVSS 7.8) in Gnome Libxslt, published March 14, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. Fixed in libxslt 1.1.38-r1.

References

Show 85 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open