<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 22:55:22 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-40896</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-40896</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libxml2&lt;/p&gt;
&lt;p&gt;In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &amp;#34;checked&amp;#34;). This makes classic XXE attacks possible.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libxml2&lt;/p&gt;
&lt;p&gt;In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &amp;#34;checked&amp;#34;). This makes classic XXE attacks possible.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-40896</guid>
    </item>
  </channel>
</rss>
