{"id":"CVE-2025-27113","aliases":["ALPINE-CVE-2025-27113","AZL-56964","AZL-57058","BELL-CVE-2025-27113","BIT-java-2025-27113","BIT-java-min-2025-27113","BIT-jre-2025-27113","CLSA-2025-1741215702","CLSA-2025-1741286016","CLSA-2025-1741286239","CLSA-2025-1741286348","CLSA-2025-1741291888","CLSA-2025-1741628775","CLSA-2025-1741629091","CLSA-2025-1741629104","CLSA-2025-1741629749","CLSA-2025-1741636522","CLSA-2025-1764958229","DEBIAN-CVE-2025-27113","DLA-4064-1","DSA-5949-1","EUVD-2025-4763","GHSA-m9m6-wcr9-hh75","JLSEC-2025-88","MGASA-2025-0073","OESA-2025-1225","ROOT-OS-ALPINE-315-CVE-2025-27113","SUSE-SU-2025:0746-1","SUSE-SU-2025:0747-1","SUSE-SU-2025:0748-1","SUSE-SU-2025:0976-1","SUSE-SU-2025:20177-1","SUSE-SU-2025:20274-1","UBUNTU-CVE-2025-27113","USN-7302-1","openSUSE-SU-2025:14830-1"],"status":"published","title":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in...","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01053,"percentile":0.64643,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-02-18T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"libxml2","fixed_in":["2.11.8-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libxml2","fixed_in":["2.11.8-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libxml2","fixed_in":["2.12.7-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libxml2","fixed_in":["2.13.4-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libxml2","fixed_in":["2.13.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libxml2","fixed_in":["2.13.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libxml2","fixed_in":["2.13.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libxml2","fixed_in":["2.10.4-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libxml2","fixed_in":["2.11.5-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libxml2","fixed_in":["2.10.4-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8-perf","fixed_in":["8.462_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libxml2","fixed_in":["2.13.6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","fixed_in":["2.10.4-r3"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.28_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","fixed_in":["8.462_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","fixed_in":["2.13.6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.28_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.16_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.16_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.8_p13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.8_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","fixed_in":["24.0.2_p12-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","fixed_in":["8.462_p11-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.8.0","8.0.461"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","fixed_in":["2.9.13-3.el9_2.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","fixed_in":["2.9.1-6.0.3.el7_9.6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","fixed_in":["2.9.7-18.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","fixed_in":["2.9.7-18.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","fixed_in":["2.9.7-18.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","fixed_in":["2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","fixed_in":["2.9.7-9.el8_4.2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","fixed_in":["2.7.6-21.el6_8.1.tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","fixed_in":["2.9.13-12.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","fixed_in":["2.9.13-12.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","fixed_in":["2.9.13-12.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-0.4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml2","fixed_in":["2.12.7+dfsg+really2.9.14-0.4"],"sources":["osv"]},{"ecosystem":"Julia","package":"XML2_jll","fixed_in":["2.13.6+1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"libxml2","fixed_in":["2.9.14-r20071","2.9.14-r20072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-libxml2","fixed_in":["2.9.14-r20071","2.9.14-r20072"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","fixed_in":["2.9.1+dfsg1-3ubuntu4.13+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","fixed_in":["2.9.3+dfsg1-1ubuntu0.7+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","fixed_in":["2.9.4+dfsg1-6.1ubuntu1.9+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","fixed_in":["2.9.10+dfsg-5ubuntu0.20.04.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","fixed_in":["2.9.13+dfsg-1ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","fixed_in":["2.9.14+dfsg-1.3ubuntu3.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.11.8-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.11.8-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.12.7-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.4-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.5-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.13.6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.10.4-r3"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10.3-r2"},{"fixed":"2.13.6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk24-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.461"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-3.el9_2.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libxml2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.0.3.el7_9.6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-18.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.0.1.el6_8.1.tuxcare.ol.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-9.el8_4.2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-21.el6_8.1.tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libxml2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13-12.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-0.4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.7+dfsg+really2.9.14-0.4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-6.7+deb11u6"}]}],"versions":["2.9.10+dfsg-6.7","2.9.10+dfsg-6.7+deb11u1","2.9.10+dfsg-6.7+deb11u2","2.9.10+dfsg-6.7+deb11u3","2.9.10+dfsg-6.7+deb11u4","2.9.10+dfsg-6.7+deb11u5"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3~deb12u2"}]}],"versions":["2.9.14+dfsg-1.2","2.9.14+dfsg-1.3~deb12u1"],"bundled":10},{"source":"osv","ecosystem":"Julia","package":"XML2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.13.6+1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-1.6.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-15.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-2.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.9-2.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10-43.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-15.oe2203sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-r20071"},{"fixed":"2.9.14-r20072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-r20071"},{"fixed":"2.9.14-r20072"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.3-150500.5.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.81.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.81.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.81.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"python-libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4-46.81.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14-150400.5.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-libxml2-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.7-150000.3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.6-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm7"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm7"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm2"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.9"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.6"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.2"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1+dfsg1-3ubuntu4.13+esm7"}]}],"versions":["2.9.1+dfsg1-3ubuntu2","2.9.1+dfsg1-3ubuntu3","2.9.1+dfsg1-3ubuntu4","2.9.1+dfsg1-3ubuntu4.1","2.9.1+dfsg1-3ubuntu4.2","2.9.1+dfsg1-3ubuntu4.3","2.9.1+dfsg1-3ubuntu4.4","2.9.1+dfsg1-3ubuntu4.5","2.9.1+dfsg1-3ubuntu4.6","2.9.1+dfsg1-3ubuntu4.7","2.9.1+dfsg1-3ubuntu4.8","2.9.1+dfsg1-3ubuntu4.9","2.9.1+dfsg1-3ubuntu4.10","2.9.1+dfsg1-3ubuntu4.11","2.9.1+dfsg1-3ubuntu4.12","2.9.1+dfsg1-3ubuntu4.13","2.9.1+dfsg1-3ubuntu4.13+esm1","2.9.1+dfsg1-3ubuntu4.13+esm2","2.9.1+dfsg1-3ubuntu4.13+esm3","2.9.1+dfsg1-3ubuntu4.13+esm4","2.9.1+dfsg1-3ubuntu4.13+esm5","2.9.1+dfsg1-3ubuntu4.13+esm6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3+dfsg1-1ubuntu0.7+esm7"}]}],"versions":["2.9.2+zdfsg1-4","2.9.2+zdfsg1-4ubuntu1","2.9.2+zdfsg1-4ubuntu2","2.9.2+zdfsg1-4ubuntu3","2.9.3+dfsg1-1","2.9.3+dfsg1-1ubuntu0.1","2.9.3+dfsg1-1ubuntu0.2","2.9.3+dfsg1-1ubuntu0.3","2.9.3+dfsg1-1ubuntu0.4","2.9.3+dfsg1-1ubuntu0.5","2.9.3+dfsg1-1ubuntu0.6","2.9.3+dfsg1-1ubuntu0.7","2.9.3+dfsg1-1ubuntu0.7+esm1","2.9.3+dfsg1-1ubuntu0.7+esm2","2.9.3+dfsg1-1ubuntu0.7+esm3","2.9.3+dfsg1-1ubuntu0.7+esm4","2.9.3+dfsg1-1ubuntu0.7+esm5","2.9.3+dfsg1-1ubuntu0.7+esm6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.4+dfsg1-6.1ubuntu1.9+esm2"}]}],"versions":["2.9.4+dfsg1-4ubuntu1","2.9.4+dfsg1-5ubuntu1","2.9.4+dfsg1-5ubuntu2","2.9.4+dfsg1-5.1ubuntu1","2.9.4+dfsg1-5.2ubuntu1","2.9.4+dfsg1-6.1ubuntu1","2.9.4+dfsg1-6.1ubuntu1.2","2.9.4+dfsg1-6.1ubuntu1.3","2.9.4+dfsg1-6.1ubuntu1.4","2.9.4+dfsg1-6.1ubuntu1.5","2.9.4+dfsg1-6.1ubuntu1.6","2.9.4+dfsg1-6.1ubuntu1.7","2.9.4+dfsg1-6.1ubuntu1.8","2.9.4+dfsg1-6.1ubuntu1.9","2.9.4+dfsg1-6.1ubuntu1.9+esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.10+dfsg-5ubuntu0.20.04.9"}]}],"versions":["2.9.4+dfsg1-7ubuntu3","2.9.4+dfsg1-7ubuntu5","2.9.4+dfsg1-8ubuntu1","2.9.4+dfsg1-8ubuntu2","2.9.4+dfsg1-8ubuntu3","2.9.10+dfsg-1ubuntu3","2.9.10+dfsg-4build1","2.9.10+dfsg-5","2.9.10+dfsg-5ubuntu0.20.04.1","2.9.10+dfsg-5ubuntu0.20.04.2","2.9.10+dfsg-5ubuntu0.20.04.3","2.9.10+dfsg-5ubuntu0.20.04.4","2.9.10+dfsg-5ubuntu0.20.04.5","2.9.10+dfsg-5ubuntu0.20.04.6","2.9.10+dfsg-5ubuntu0.20.04.7","2.9.10+dfsg-5ubuntu0.20.04.8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.13+dfsg-1ubuntu0.6"}]}],"versions":["2.9.12+dfsg-4","2.9.12+dfsg-5","2.9.12+dfsg-6","2.9.13+dfsg-1","2.9.13+dfsg-1build1","2.9.13+dfsg-1ubuntu0.1","2.9.13+dfsg-1ubuntu0.2","2.9.13+dfsg-1ubuntu0.3","2.9.13+dfsg-1ubuntu0.4","2.9.13+dfsg-1ubuntu0.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.14+dfsg-1.3ubuntu3.2"}]}],"versions":["2.9.14+dfsg-1.3","2.9.14+dfsg-1.3build1","2.9.14+dfsg-1.3build2","2.9.14+dfsg-1.3build3","2.9.14+dfsg-1.3ubuntu1","2.9.14+dfsg-1.3ubuntu2","2.9.14+dfsg-1.3ubuntu3","2.9.14+dfsg-1.3ubuntu3.1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libxml2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.6-1.1"}]}],"bundled":3}],"products":[{"vendor":"gnome","product":"libxml2"},{"vendor":"xmlsoft","product":"libxml2"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/libxml2/-/issues/861","tags":["Exploit","Issue Tracking","evidence","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250306-0004/","tags":["web","advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/13","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/10","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/9","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/8","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/5","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/4","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/12","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2025/Apr/11","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27113","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250306-0004"},{"url":"https://github.com/advisories/GHSA-m9m6-wcr9-hh75"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-27113","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-27113","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1741215702.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/oraclelinux7-els/CLSA-2025-1741286016.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1741286239.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2025-1741286348.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1741291888.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2025-1741628775.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2025-1741629091.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1741629104.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1741629749.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2025-1741636522.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1764958229.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27113.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27113","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0073.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34037","tags":["report"]},{"url":"https://openwall.com/lists/oss-security/2025/02/18/2","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24928","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250746-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237363","tags":["report"]},{"url":"https://bugzilla.suse.com/1237370","tags":["report"]},{"url":"https://bugzilla.suse.com/1237418","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27113","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250747-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250748-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250976-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520177-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520274-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27113","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27113","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/02/18/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7302-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-49043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-24928","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T00:00:00Z","modified":"2025-11-03T21:13:22.434Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-4763","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T00:00:00Z","modified":"2025-11-03T21:13:22Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-m9m6-wcr9-hh75","title":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in...","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-19T00:31:19Z","modified":"2025-11-04T00:32:21Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:31.19776Z"}],"nvd":[{"id":"CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:10.96Z","modified":"2026-06-17T09:03:03.627Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:10:51.445921Z"}],"osv":[{"id":"ALPINE-CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:10.96Z","modified":"2026-08-27T22:18:02.854369215Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-56964","title":"CVE-2025-27113 affecting package libxml2 for versions less than 2.10.4-6","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:10Z","modified":"2026-04-21T04:36:49.340697Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57058","title":"CVE-2025-27113 affecting package libxml2 for versions less than 2.11.5-4","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:10Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:21.162429Z"},{"id":"BELL-CVE-2025-27113","status":"published","published":"2025-02-20T05:57:02.27995Z","modified":"2026-01-26T09:39:05.322674Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T00:00:00Z","modified":"2026-10-28T02:31:09.405884199Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:10.96Z","modified":"2026-09-01T20:05:45.041995975Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2025-88","title":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in...","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-10-17T17:40:51.659Z","modified":"2026-07-25T18:23:46.088886528Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2025-1225","title":"libxml2 security update","description":"This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select sub nodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library.\r\n\r\nSecurity Fix(es):\n\nlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.(CVE-2024-56171)\n\nlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.(CVE-2025-24928)\n\nlibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.(CVE-2025-27113)","status":"published","published":"2025-02-28T11:08:19Z","modified":"2026-08-18T01:18:49.192624672Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2025-27113","title":"CVE-2025-27113 in libxml2 - Patched by Root","description":"Root has patched CVE-2025-27113 in the libxml2 package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:31:46Z","modified":"2026-09-29T10:15:08.422208918Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2025-02-18T23:15:00Z","modified":"2026-04-22T15:39:38.519741Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"BIT-java-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2026-05-06T14:45:21.731Z","modified":"2026-09-08T08:48:00.477059959Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2026-05-06T14:45:23.255Z","modified":"2026-09-08T08:47:55.726615107Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","status":"published","published":"2026-05-08T05:47:00.707Z","modified":"2026-09-08T08:48:06.209345418Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2025-1741215702","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c","status":"published","published":"2025-03-05T23:01:47Z","modified":"2026-06-01T00:30:20.049185992Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741286016","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-06T18:33:41Z","modified":"2026-06-01T00:32:56.723101777Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741286239","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext\n     - debian/patches/CVE-2024-34459.patch: Fix buffer overread with `xmllint\n       --htmlout` by adding a missing bounds check\n     - CVE-2024-34459\n   * SECURITY UPDATE: use-after-free vulnerability in xinclude.c\n     - debian/patches/CVE-2022-49043.patch: Fix use-after-free in\n       xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free\n     - CVE-2022-49043\n   * SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in\n     valid.c\n     - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in\n       xmlSnprintfElements caused by improperly calculating qname length\n     - CVE-2025-24928\n   * SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c\n     - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child\n       axis to generate XML_OP_ELEM like the case without an axis\n     - CVE-2025-27113\n   * SECURITY UPDATE: use-after-free vulnerability in XML schema processing\n     - debian/patches/CVE-2024-56171.patch: Fix use-after-free after\n       xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and\n       xmlSchemaBubbleIDCNodeTables\n     - CVE-2024-56171","status":"published","published":"2025-03-06T18:37:24Z","modified":"2026-06-04T10:03:13.313824144Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741286348","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext\n     - debian/patches/CVE-2024-34459.patch: Fix buffer overread with `xmllint\n       --htmlout` by adding a missing bounds check\n     - CVE-2024-34459\n   * SECURITY UPDATE: use-after-free vulnerability in xinclude.c\n     - debian/patches/CVE-2022-49043.patch: Fix use-after-free in\n       xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free\n     - CVE-2022-49043\n   * SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in\n     valid.c\n     - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in\n       xmlSnprintfElements caused by improperly calculating qname length\n     - CVE-2025-24928\n   * SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c\n     - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child\n       axis to generate XML_OP_ELEM like the case without an axis\n     - CVE-2025-27113\n   * SECURITY UPDATE: use-after-free vulnerability in XML schema processing\n     - debian/patches/CVE-2024-56171.patch: Fix use-after-free after\n       xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and\n       xmlSchemaBubbleIDCNodeTables\n     - CVE-2024-56171","status":"published","published":"2025-03-06T18:39:13Z","modified":"2026-06-04T10:03:23.679641357Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741291888","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-06T20:11:33Z","modified":"2026-06-01T00:33:17.82474455Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741628775","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-10T17:46:20Z","modified":"2026-06-01T00:32:57.88253277Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741629091","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-10T17:51:36Z","modified":"2026-06-01T00:33:25.834040451Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741629104","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-10T17:51:49Z","modified":"2026-06-01T00:33:21.132996422Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741629749","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-17T16:17:33Z","modified":"2026-06-01T00:33:23.007230701Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1741636522","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix compilation of explicit child axis","status":"published","published":"2025-03-10T19:55:28Z","modified":"2026-06-01T00:33:16.421500965Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1764958229","title":"libxml2: Fix of CVE-2025-27113","description":"- CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c","status":"published","published":"2025-12-05T18:10:32Z","modified":"2026-06-01T00:32:36.775330933Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4064-1","title":"libxml2 - security update","status":"published","published":"2025-02-22T00:00:00Z","modified":"2026-03-09T01:20:30.558703Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5949-1","title":"libxml2 - security update","status":"published","published":"2025-06-26T00:00:00Z","modified":"2026-03-09T02:09:32.257423Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0073","title":"Updated libxml2 packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nUse-after-free in xmlSchemaIDCFillNodeTables. (CVE-2024-56171)\nStack-buffer-overflow in xmlSnprintfElements. (CVE-2025-24928)\nNull-deref in xmlPatMatch. (CVE-2025-27113)\n","status":"published","published":"2025-02-25T16:58:04Z","modified":"2026-04-16T04:43:48.572211064Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14830-1","title":"libxml2-2-2.13.6-1.1 on GA media","description":"These are all security issues fixed in the libxml2-2-2.13.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-21T00:00:00Z","modified":"2026-02-04T03:08:22.949426Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:0746-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c\n  (bsc#1237363).\n- CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).\n- CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).\n","status":"published","published":"2025-02-28T16:10:26Z","modified":"2025-05-02T04:37:16.178845Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0747-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c\n  (bsc#1237363).\n- CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).\n- CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).\n","status":"published","published":"2025-02-28T16:11:47Z","modified":"2026-02-04T02:59:02.3129Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0748-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c\n  (bsc#1237363).\n- CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).\n- CVE-2025-27113: NULL pointer dereference in xmlPatMatch in pattern.c (bsc#1237418).\n","status":"published","published":"2025-02-28T16:14:27Z","modified":"2025-05-02T04:37:16.303596Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0976-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).\n- CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).\n- CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch (bsc#1237418).\n","status":"published","published":"2025-03-21T08:25:09Z","modified":"2026-02-04T04:32:23.842556Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:20177-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n  - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).\n  - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).\n  - CVE-2025-27113: Fixed NULL Pointer Dereference in xmlPatMatch (bsc#1237418).\n","status":"published","published":"2025-04-04T13:07:10Z","modified":"2026-03-23T04:48:11.469152Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20274-1","title":"Security update for libxml2","description":"This update for libxml2 fixes the following issues:\n\n- CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c [bsc#1237363]\n- CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c [bsc#1237370]\n- CVE-2025-27113: Fixed NULL Pointer Dereference in libxml2 xmlPatMatch [bsc#1237418]\n\n","status":"published","published":"2025-04-22T12:11:27Z","modified":"2026-03-23T04:48:13.511045Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7302-1","title":"libxml2 vulnerabilities","description":"It was discovered that libxml2 incorrectly handled certain memory\noperations. A remote attacker could use this issue to cause libxml2 to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2022-49043)\n\nIt was discovered that the libxml2 xmllint tool incorrectly handled\ncertain memory operations. If a user or automated system were tricked into\nrunning xmllint on a specially crafted xml file, a remote attacker could\ncause xmllint to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-34459)\n\nIt was discovered that libxml2 did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2024-56171) \n\nIt was discovered that libxml2 could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2025-24928)\n\nIt was discovered that libxml2 could be made to dereference invalid memory.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2025-27113)\n","status":"published","published":"2025-02-25T19:23:47Z","modified":"2026-06-25T13:31:46.031195386Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}