LI
Product
Libxslt
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 4Low 0
Watch
Add Libxslt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-29824 | 6.5 | May 3 | In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows Affected: through 1.1.35 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: 1.1.33 |
| CVE-2019-13117 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers Affected: 1.1.33 |
| CVE-2015-9019 | 5.3 | Apr 5 | In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce… Affected: through 1.1.29 |
Showing 4
