{"id":"CVE-2023-40403","aliases":["ALSA-2025:8676","ALSA-2026:6266","CLSA-2026-1776443255","CLSA-2026-1778898606","DEBIAN-CVE-2023-40403","DLA-4309-1","DSA-5979-1","EUVD-2023-44974","GHSA-j822-w26r-9cxf","OESA-2026-4424","RHSA-2025:8676","RHSA-2025:9016","RHSA-2026:29811","RHSA-2026:6266","RHSA-2026:6499","RLSA-2025:8676","RLSA-2026:6266","SUSE-SU-2025:1003-1","SUSE-SU-2025:1125-1","SUSE-SU-2025:20201-1","SUSE-SU-2025:20277-1","SUSE-SU-2026:2585-1","UBUNTU-CVE-2023-40403","USN-7600-1"],"status":"published","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6,...","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01327,"percentile":0.71202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-09-26T20:14:54Z","modified":"2026-10-29T11:32:37Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libxslt","fixed_in":["1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libxslt-devel","fixed_in":["1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxslt","fixed_in":["1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxslt-devel","fixed_in":["1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt","fixed_in":["1.1.34-13.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt-devel","fixed_in":["1.1.34-13.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt","fixed_in":["1.1.34-9.el9.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt-devel","fixed_in":["1.1.34-9.el9.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxslt","fixed_in":["1.1.35-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxslt","fixed_in":["1.1.35-1.2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxslt","fixed_in":["1.1.35-2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","fixed_in":["1.1.37-7.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-devel","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debuginfo","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debugsource","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt","fixed_in":["0:1.1.34-14.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-14.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-14.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-14.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt","fixed_in":["0:1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt","fixed_in":["0:1.1.34-13.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-13.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-13.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-13.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libxslt","fixed_in":["0:1.1.32-6.2.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libxslt","fixed_in":["0:1.1.34-14.el9_7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxslt","fixed_in":["1.1.28-17.24.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","fixed_in":["1.1.28-2ubuntu0.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","fixed_in":["1.1.28-2.1ubuntu0.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","fixed_in":["1.1.29-5ubuntu0.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.20.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.22.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-13.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-13.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u2"}]}],"versions":["1.1.35-1","1.1.35-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2+deb13u1"}]}],"versions":["1.1.35-1.2"]},{"source":"osv","ecosystem":"Debian:14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-2"}]}],"versions":["1.1.35-1.2"]},{"source":"osv","ecosystem":"Debian:11","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4+deb11u3"}]}],"versions":["1.1.34-4","1.1.34-4+deb11u1","1.1.34-4+deb11u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u2"}]}],"versions":["1.1.35-1","1.1.35-1+deb12u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2+deb13u1"}]}],"versions":["1.1.35-1.2"],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-7.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-12.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-12.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-12.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-12.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-13.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-13.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-13.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-13.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.2.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-14.el9_7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-17.24.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm3"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm2"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm1"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3+esm1"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2","1.1.34-4ubuntu0.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.4"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2","1.1.34-4ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm3"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm2"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm1"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3+esm1"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2","1.1.34-4ubuntu0.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.4"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2","1.1.34-4ubuntu0.22.04.3"]}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT213938","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213932","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213927","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","article"]},{"url":"https://support.apple.com/en-us/HT213931","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213936","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213940","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT213937","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/5","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/10","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/6","tags":["x_transferred","web","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/8","tags":["x_transferred","web","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/9","tags":["x_transferred","web","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/3","tags":["x_transferred","web","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/4","tags":["x_transferred","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html","tags":["web"]},{"url":"https://support.apple.com/kb/HT213940","tags":["web"]},{"url":"https://support.apple.com/kb/HT213932","tags":["web"]},{"url":"https://support.apple.com/kb/HT213931","tags":["web"]},{"url":"https://support.apple.com/kb/HT213938","tags":["web"]},{"url":"https://support.apple.com/kb/HT213937","tags":["web"]},{"url":"https://support.apple.com/kb/HT213936","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40403","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j822-w26r-9cxf"},{"url":"https://access.redhat.com/errata/RHSA-2025:8676","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40403","tags":["report"]},{"url":"https://bugzilla.redhat.com/2349766","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8676.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6266","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-6266.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776443255.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778898606.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-40403","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4424","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349766","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8676.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40403","tags":["advisory","report"]},{"url":"https://bugs.chromium.org/p/chromium/issues/detail?id=1356211","tags":["article"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=751621","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/94","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9016","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9016.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29811","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397838","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29811.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/144","tags":["article"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6266.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6499","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6499.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8676","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:6266","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251003-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1238591","tags":["report"]},{"url":"https://bugzilla.suse.com/1239625","tags":["report"]},{"url":"https://bugzilla.suse.com/1239637","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24855","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251125-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520201-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520277-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262585-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-40403","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7600-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-40403","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-26T20:14:54.697Z","modified":"2025-11-04T19:18:23.582Z","updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-44974","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-26T20:14:54Z","modified":"2025-11-04T19:18:23Z","updated_at":"2026-11-02T19:49:22.434386Z"}],"ghsa":[{"id":"GHSA-j822-w26r-9cxf","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6,...","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-27T15:30:35Z","modified":"2025-11-04T21:31:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:04:37.582006Z"}],"nvd":[{"id":"CVE-2023-40403","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-27T15:19:08.12Z","modified":"2026-06-17T06:17:37.03Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:08:31.699785Z"}],"osv":[{"id":"CVE-2023-40403","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-27T15:19:08.12Z","modified":"2026-06-24T09:14:34.456783117Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-40403","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-27T15:19:08.12Z","modified":"2026-10-26T18:02:32.484818563Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"OESA-2026-4424","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.(CVE-2023-40403)","status":"published","published":"2026-10-22T14:34:59Z","modified":"2026-10-22T14:45:05.980130435Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2025:8676","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-06-10T10:02:59Z","modified":"2026-10-14T10:11:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9016","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-06-13T10:03:49Z","modified":"2026-10-14T10:11:18Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2026:29811","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2026-06-25T10:43:14Z","modified":"2026-10-14T10:17:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:6266","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2026-04-01T10:07:52Z","modified":"2026-10-14T10:25:44Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:6499","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2026-04-03T10:09:41Z","modified":"2026-10-14T10:26:22Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RLSA-2025:8676","title":"Moderate: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. \n\nSecurity Fix(es):\n\n* libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:56.555061Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:6266","title":"Moderate: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. \n\nSecurity Fix(es):\n\n* libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-07T12:03:55.701474Z","modified":"2026-04-07T12:30:17.158967Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2023-40403","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.","status":"published","published":"2023-09-27T15:19:00Z","modified":"2026-04-22T14:11:30.675024Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2025:8676","title":"Moderate: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   \n\nSecurity Fix(es):  \n\n  * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-09T00:00:00Z","modified":"2026-10-29T11:02:23.220455665Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:6266","title":"Moderate: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   \n\nSecurity Fix(es):  \n\n  * libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-31T00:00:00Z","modified":"2026-10-29T11:32:37.120501856Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1776443255","title":"libxslt: Fix of CVE-2023-40403","description":"- CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak","status":"published","published":"2026-04-17T16:27:39Z","modified":"2026-06-01T00:32:47.508591841Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1778898606","title":"libxslt: Fix of CVE-2023-40403","description":"- CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak","status":"published","published":"2026-05-16T02:30:11Z","modified":"2026-06-01T00:32:31.431515003Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-4309-1","title":"libxslt - security update","status":"published","published":"2025-09-25T00:00:00Z","modified":"2025-09-25T10:31:57.312294Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5979-1","title":"libxslt - security update","status":"published","published":"2025-08-19T00:00:00Z","modified":"2026-03-09T02:09:46.227639Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"SUSE-SU-2025:1003-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)\n- CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)\n- CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)\n","status":"published","published":"2025-03-25T08:42:08Z","modified":"2026-02-04T02:29:25.658415Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:1125-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)\n- CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)\n- CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)\n","status":"published","published":"2025-04-03T11:49:40Z","modified":"2026-02-04T03:43:33.685193Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20201-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n* CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625) \n* CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)\n* CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)\n","status":"published","published":"2025-04-23T13:11:10Z","modified":"2026-03-23T04:48:53.087881Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20277-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n* CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)\n* CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)\n* CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)\n","status":"published","published":"2025-04-22T13:46:18Z","modified":"2026-03-23T04:48:55.234975Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2026:2585-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issue\n\n- CVE-2023-40403: Processing web content may disclose sensitive information (bsc#1238591).\n","status":"published","published":"2026-06-23T13:28:00Z","modified":"2026-06-24T09:00:17.39223015Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-7600-1","title":"libxslt vulnerability","description":"It was discovered that libxslt could be made to expose sensitive\ninformation about address space layout. An attacker could possibly use this\nissue to bypass Address Space Layout Randomization (ASLR) protections.","status":"published","published":"2025-06-26T13:53:02Z","modified":"2026-06-25T13:32:30.452636521Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}