libxml2

Products

ProductCVEsExploitedLatest
libxml22–Sep 10, 2025

Exploited and recent CVEs

  • CVE-2025-9714 Medium 6.2 Stack overflow in libxml2 0.2%
  • CVE-2024-40896 Critical 9.1 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by settin 1.2%