{"id":"CVE-2025-24855","aliases":["ALPINE-CVE-2025-24855","ALSA-2025:3107","ALSA-2025:3615","ALSA-2025:7496","AZL-58644","AZL-58665","BELL-CVE-2025-24855","BIT-java-2025-24855","BIT-java-min-2025-24855","BIT-jre-2025-24855","CLSA-2025-1743763948","CLSA-2025-1745587914","CLSA-2026-1788275913","CLSA-2026-1792507096","DEBIAN-CVE-2025-24855","DLA-4089-1","DSA-5884-1","EUVD-2025-7659","GHSA-3cgj-v3m4-cgcq","JLSEC-2026-583","MGASA-2025-0110","OESA-2025-1296","RHSA-2025:3107","RHSA-2025:3389","RHSA-2025:3528","RHSA-2025:3612","RHSA-2025:3615","RHSA-2025:3619","RHSA-2025:3624","RHSA-2025:3625","RHSA-2025:3626","RHSA-2025:3627","RHSA-2025:4098","RHSA-2025:7496","RLSA-2025:3615","RLSA-2025:7496","SUSE-SU-2025:1003-1","SUSE-SU-2025:1125-1","SUSE-SU-2025:1494-1","SUSE-SU-2025:20201-1","SUSE-SU-2025:20277-1","UBUNTU-CVE-2025-24855","USN-7361-1","USN-7787-1","openSUSE-SU-2025:14894-1","openSUSE-SU-2025:15531-1"],"status":"published","title":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00358,"percentile":0.29875,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2025-03-14T00:00:00Z","modified":"2026-11-03T06:32:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"libxslt","fixed_in":["1.1.38-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxslt","fixed_in":["1.1.39-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxslt","fixed_in":["1.1.39-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxslt","fixed_in":["1.1.42-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxslt","fixed_in":["1.1.43-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxslt","fixed_in":["1.1.43-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxslt","fixed_in":["1.1.43-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.17-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.17-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.17-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxslt","fixed_in":["1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libxslt-devel","fixed_in":["1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libxslt","fixed_in":["1.1.34-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxslt","fixed_in":["1.1.43-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxslt","fixed_in":["1.1.37-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8-perf","fixed_in":["8.462_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxslt","fixed_in":["1.1.43-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxslt","fixed_in":["1.1.37-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","fixed_in":["8.462_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxslt","fixed_in":["1.1.43-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxslt","fixed_in":["1.1.28-6.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxslt-devel","fixed_in":["1.1.28-6.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxslt-python","fixed_in":["1.1.28-6.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt","fixed_in":["1.1.34-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt-devel","fixed_in":["1.1.34-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxslt1-dev","fixed_in":["1.1.29-5ubuntu0.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libxslt1.1","fixed_in":["1.1.29-5ubuntu0.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxslt1","fixed_in":["1.1.29-5ubuntu0.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"xsltproc","fixed_in":["1.1.29-5ubuntu0.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxslt","fixed_in":["1.1.35-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxslt","fixed_in":["1.1.35-1.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxslt","fixed_in":["1.1.35-1.2"],"sources":["osv"]},{"ecosystem":"Julia","package":"XSLT_jll","fixed_in":["1.1.43+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt","fixed_in":["0:1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-9.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt","fixed_in":["0:1.1.34-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt","fixed_in":["0:1.1.34-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-debuginfo","fixed_in":["0:1.1.34-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-debugsource","fixed_in":["0:1.1.34-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-devel","fixed_in":["0:1.1.34-10.el9_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","fixed_in":["1.1.28-2ubuntu0.2+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","fixed_in":["1.1.28-2.1ubuntu0.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","fixed_in":["1.1.29-5ubuntu0.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.20.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","fixed_in":["1.1.34-4ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","fixed_in":["1.1.39-0exp1ubuntu0.24.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.42-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-6.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-6.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-6.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxslt1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxslt1.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxslt1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"xsltproc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.26-2.el6_3.1.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.26-2.el6_3.1.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.26-2.el6_3.1.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u1"}]}],"versions":["1.1.35-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1.2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4+deb11u2"}]}],"versions":["1.1.34-4","1.1.34-4+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.35-1+deb12u1"}]}],"versions":["1.1.35-1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"XSLT_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.43+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-1.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-2.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-3.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-3.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-7.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.37-2.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-9.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.el8_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-8.el8_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-11.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-11.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-11.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.34-11.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.28-9.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.28-9.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.28-9.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.28-9.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libxslt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.32-6.1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.39-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.32-150000.3.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-150400.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-17.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-17.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.38-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm4"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2","1.1.28-2ubuntu0.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm3"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1","1.1.28-2.1ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm2"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3","1.1.29-5ubuntu0.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.3"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-0exp1ubuntu0.24.04.2"}]}],"versions":["1.1.35-1","1.1.39-0exp1","1.1.39-0exp1build1","1.1.39-0exp1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.20.04.3"}]}],"versions":["1.1.33-0ubuntu1","1.1.33-0ubuntu2","1.1.33-0ubuntu3","1.1.34-1","1.1.34-1ubuntu1","1.1.34-3","1.1.34-4","1.1.34-4ubuntu0.20.04.1","1.1.34-4ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.34-4ubuntu0.22.04.3"}]}],"versions":["1.1.34-4","1.1.34-4build1","1.1.34-4build2","1.1.34-4ubuntu0.22.04.1","1.1.34-4ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.39-0exp1ubuntu0.24.04.2"}]}],"versions":["1.1.35-1","1.1.39-0exp1","1.1.39-0exp1build1","1.1.39-0exp1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2ubuntu0.2+esm4"}]}],"versions":["1.1.28-2","1.1.28-2build1","1.1.28-2ubuntu0.1","1.1.28-2ubuntu0.2","1.1.28-2ubuntu0.2+esm1","1.1.28-2ubuntu0.2+esm2","1.1.28-2ubuntu0.2+esm3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.28-2.1ubuntu0.3+esm3"}]}],"versions":["1.1.28-2build2","1.1.28-2.1","1.1.28-2.1ubuntu0.1","1.1.28-2.1ubuntu0.2","1.1.28-2.1ubuntu0.3","1.1.28-2.1ubuntu0.3+esm1","1.1.28-2.1ubuntu0.3+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.29-5ubuntu0.3+esm2"}]}],"versions":["1.1.29-2.1ubuntu1","1.1.29-4","1.1.29-5","1.1.29-5ubuntu0.1","1.1.29-5ubuntu0.2","1.1.29-5ubuntu0.3","1.1.29-5ubuntu0.3+esm1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxslt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.43-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.19-1.1"}]}],"bundled":16}],"products":[{"vendor":"gnome","product":"libxslt"},{"vendor":"xmlsoft","product":"libxslt"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/128","tags":["Exploit","Issue Tracking","Vendor Advisory","advisory","report","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00015.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24855","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-3cgj-v3m4-cgcq","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-24855","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3107","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24855","tags":["report"]},{"url":"https://bugzilla.redhat.com/2352483","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-3107.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3615","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-55549","tags":["report"]},{"url":"https://bugzilla.redhat.com/2352484","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-3615.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7496","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-7496.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-24855","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1743763948.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745587914.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788275913.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1792507096.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55549","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24855.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-24855","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0110.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34113","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/ZKCQGOW24ZBKSYCIKDUG4KKITEGCJKY2/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1296","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352483","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3107.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24855","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3389","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3389.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3528","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3528.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3612","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3612.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-55549","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libxslt/-/issues/127","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3615.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3619","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3619.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3624","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3624.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3625","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3625.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3626","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3626.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3627","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3627.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4098","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-87781","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4098.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7496.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:3615","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7496","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251003-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1238591","tags":["report"]},{"url":"https://bugzilla.suse.com/1239625","tags":["report"]},{"url":"https://bugzilla.suse.com/1239637","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24855","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251125-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251494-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520201-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520277-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-24855","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7361-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7787-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-55549","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZKCQGOW24ZBKSYCIKDUG4KKITEGCJKY2/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3619","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T00:00:00Z","modified":"2026-02-26T19:09:31.574Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-7659","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T00:00:00Z","modified":"2026-02-26T19:09:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:15.233808Z"}],"ghsa":[{"id":"GHSA-3cgj-v3m4-cgcq","title":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T03:31:24Z","modified":"2025-11-04T00:32:21Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:31.19776Z"}],"nvd":[{"id":"CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:15.717Z","modified":"2026-06-17T08:59:44.487Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:10:53.93104Z"}],"osv":[{"id":"ALPINE-CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:15.717Z","modified":"2026-11-03T06:32:51.875084967Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"BELL-CVE-2025-24855","status":"published","published":"2025-03-14T17:42:18.239166Z","modified":"2026-09-06T07:15:18.783153691Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.491466Z"},{"id":"CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T00:00:00Z","modified":"2026-10-29T02:48:34.486012772Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:15.717Z","modified":"2026-09-01T20:05:44.620311565Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2026-583","title":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an...","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2026-06-08T13:15:35.983Z","modified":"2026-07-18T00:00:14.918980468Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2025-1296","title":"libxslt security update","description":"Libxslt is the XSLT C library developed for the GNOME project\r\n\r\nSecurity Fix(es):\n\nxsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.(CVE-2024-55549)\n\nnumbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.(CVE-2025-24855)","status":"published","published":"2025-03-21T11:08:23Z","modified":"2026-08-18T01:18:49.36606884Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:3107","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-03-25T10:04:53Z","modified":"2026-10-14T10:09:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3389","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-03-31T10:02:57Z","modified":"2026-10-14T10:09:59Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3528","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-03T10:07:01Z","modified":"2026-10-14T10:10:03Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3612","title":"Red Hat Security Advisory: libxslt security update","status":"withdrawn","published":"2025-04-07T10:03:48Z","modified":"2026-03-25T13:00:21.818206Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3615","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-07T10:03:50Z","modified":"2026-10-14T10:10:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3619","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-07T10:03:52Z","modified":"2026-10-14T10:10:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3624","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-07T10:03:55Z","modified":"2026-10-14T10:10:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3625","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-07T10:03:56Z","modified":"2026-10-14T10:10:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3626","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-07T10:03:56Z","modified":"2026-10-14T10:10:10Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3627","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-08T10:04:10Z","modified":"2026-10-14T10:10:10Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4098","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-04-24T10:03:54Z","modified":"2026-10-14T10:10:20Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7496","title":"Red Hat Security Advisory: libxslt security update","status":"published","published":"2025-05-14T10:06:39Z","modified":"2026-10-14T10:10:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:3615","title":"Important: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. \n\nSecurity Fix(es):\n\n* libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)\n\n* libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:55.526395Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7496","title":"Important: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism. \n\nSecurity Fix(es):\n\n* libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)\n\n* libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-03T20:18:36.274553Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:00Z","modified":"2026-04-22T15:39:10.325623Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:3107","title":"Important: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   \n\nSecurity Fix(es):  \n\n  * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-03-24T00:00:00Z","modified":"2026-10-29T11:32:14.967304041Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:3615","title":"Important: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   \n\nSecurity Fix(es):  \n\n  * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)\n  * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-04-07T00:00:00Z","modified":"2026-10-29T11:02:22.993186896Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7496","title":"Important: libxslt security update","description":"libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.   \n\nSecurity Fix(es):  \n\n  * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)\n  * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:58:15.558297Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-58644","title":"CVE-2025-24855 affecting package libxslt for versions less than 1.1.34-8","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:15Z","modified":"2026-04-21T04:28:36.87146Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-58665","title":"CVE-2025-24855 affecting package libxslt for versions less than 1.1.43-1","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2025-03-14T02:15:15Z","modified":"2026-04-21T04:47:47.219787Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"BIT-java-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2026-05-06T14:45:18.662Z","modified":"2026-09-10T16:01:22.794481164Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2026-05-06T14:45:20.52Z","modified":"2026-09-10T16:01:22.764820133Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2025-24855","description":"numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.","status":"published","published":"2026-05-08T05:46:57.533Z","modified":"2026-09-10T16:01:22.860802747Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2025-1743763948","title":"libxslt: Fix of CVE-2025-24855","description":"- CVE-2025-24855: fix use-after-free issue in numbers.c by restoring XPath\n  context node in nested XPath evaluations","status":"published","published":"2025-04-04T10:52:33Z","modified":"2026-06-01T00:33:17.726090374Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1745587914","title":"libxslt: Fix of CVE-2025-24855","description":"- CVE-2025-24855: fix use-after-free of XPath context node","status":"published","published":"2025-04-25T13:31:59Z","modified":"2026-06-01T00:30:48.957025658Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1788275913","title":"Fix CVE(s): CVE-2025-24855","description":"   * SECURITY UPDATE: use-after-free of the XPath context node\n     - debian/patches/CVE-2025-24855.patch: restore the XPath context node\n       after modifying it in libxslt/numbers.c, libxslt/templates.c and\n       libxslt/xsltutils.c.\n     - CVE-2025-24855","status":"published","published":"2026-09-01T15:18:43Z","modified":"2026-10-26T09:32:04.123918569Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792507096","title":"libxslt: Fix of 6 CVEs","description":"- CVE-2019-11068: fix security framework bypass in xsltCheckRead and\n  xsltCheckWrite callers\n- CVE-2019-18197: fix dangling pointer in xsltCopyText\n- CVE-2019-5815: always set context node before calling XPath iterators\n- CVE-2021-30560: fix use-after-free in xsltApplyTemplates\n- CVE-2024-55549: fix use-after-free related to excluded namespaces\n- CVE-2025-24855: fix use-after-free of XPath context node in nested\n  XPath evaluations","status":"published","published":"2026-10-20T16:51:41Z","modified":"2026-10-26T09:31:41.19384159Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"DLA-4089-1","title":"libxslt - security update","status":"published","published":"2025-03-24T00:00:00Z","modified":"2026-03-09T01:23:02.35385Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5884-1","title":"libxslt - security update","status":"published","published":"2025-03-23T00:00:00Z","modified":"2026-03-09T02:10:44.901091Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0110","title":"Updated libxslt packages fix security vulnerabilities","description":"xsltGetInheritedNsList in libxslt has a use-after-free issue related to\nexclusion of result prefixes (CVE-2024-55549).\nnumbers.c in libxslt has a use-after-free because, in nested XPath\nevaluations, an XPath context node can be modified but never restored.\nThis is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate,\nxsltEvalXPathStringNs, and xsltComputeSortResultInternal\n(CVE-2025-24855).\n","status":"published","published":"2025-03-22T17:53:31Z","modified":"2026-04-16T04:44:03.98968537Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14894-1","title":"libexslt0-1.1.43-1.1 on GA media","description":"These are all security issues fixed in the libexslt0-1.1.43-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-15T00:00:00Z","modified":"2026-02-04T02:53:14.635065Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15531-1","title":"libQt5Pdf5-5.15.19-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.19-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-06T00:00:00Z","modified":"2026-03-23T04:53:54.047811Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:1003-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)\n- CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)\n- CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)\n","status":"published","published":"2025-03-25T08:42:08Z","modified":"2026-02-04T02:29:25.658415Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:1125-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)\n- CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)\n- CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)\n","status":"published","published":"2025-04-03T11:49:40Z","modified":"2026-02-04T03:43:33.685193Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1494-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n- CVE-2025-24855: Fixed use-after-free of XPath context node (bsc#1239625)\n- CVE-2024-55549: Fixed use-after-free related to excluded namespaces (bsc#1239637)\n","status":"published","published":"2025-05-06T23:46:13Z","modified":"2026-03-23T04:50:01.245036Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20201-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n* CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625) \n* CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)\n* CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)\n","status":"published","published":"2025-04-23T13:11:10Z","modified":"2026-03-23T04:48:53.087881Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20277-1","title":"Security update for libxslt","description":"This update for libxslt fixes the following issues:\n\n* CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)\n* CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)\n* CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)\n","status":"published","published":"2025-04-22T13:46:18Z","modified":"2026-03-23T04:48:55.234975Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7361-1","title":"libxslt vulnerability","description":"Ivan Fratric discovered that Libxslt incorrectly handled certain memory\noperations when handling documents. A remote attacker could use this issue\nto cause Libxslt to crash, resulting in a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2025-03-20T11:57:31Z","modified":"2026-04-22T10:56:08.631689Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7787-1","title":"libxslt vulnerabilities","description":"Ivan Fratric discovered that Libxslt did not correctly handle certain\nmemory operations. An attacker could possibly use this issue to execute\narbitrary code or cause a denial of service.","status":"published","published":"2025-09-30T23:47:26Z","modified":"2026-06-25T13:32:31.230408336Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}