Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:47:57 +0000 CVE-2025-71407 https://vulnerability.circl.lu/vuln/cve-2025-71407 CVE-2025-71407 https://vulnerability.circl.lu/vuln/cve-2025-71407 GHSA-vvfq-8hwr-qm4m — Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171 https://vulnerability.circl.lu/vuln/ghsa-vvfq-8hwr-qm4m <p><strong>Affected:</strong> RubyGems: nokogiri</p> <p>## Summary</p> <p>Nokogiri v1.18.3 upgrades its dependency libxml2 to [v2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6).</p> <p>libxml2 v2.13.6 addresses:</p> <p>- CVE-2025-24928 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 - CVE-2024-56171 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/828</p> <p>## Impact</p> <p>### CVE-2025-24928</p> <p>Stack-buffer overflow is possible when reporting DTD validation errors if the input contains a long (~3kb) QName prefix.</p> <p>### CVE-2024-56171</p> <p>Use-after-free is possible during validation against untrusted XML Schemas (.xsd) and, potentially, validation of untrusted documents against trusted Schemas if they make use of `xsd:keyref` in combination with recursively defined types that have additional identity constraints.</p> <p><strong>Affected:</strong> RubyGems: nokogiri</p> <p>## Summary</p> <p>Nokogiri v1.18.3 upgrades its dependency libxml2 to [v2.13.6](https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.6).</p> <p>libxml2 v2.13.6 addresses:</p> <p>- CVE-2025-24928 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 - CVE-2024-56171 - described at https://gitlab.gnome.org/GNOME/libxml2/-/issues/828</p> <p>## Impact</p> <p>### CVE-2025-24928</p> <p>Stack-buffer overflow is possible when reporting DTD validation errors if the input contains a long (~3kb) QName prefix.</p> <p>### CVE-2024-56171</p> <p>Use-after-free is possible during validation against untrusted XML Schemas (.xsd) and, potentially, validation of untrusted documents against trusted Schemas if they make use of `xsd:keyref` in combination with recursively defined types that have additional identity constraints.</p> https://vulnerability.circl.lu/vuln/ghsa-vvfq-8hwr-qm4m