MEDIUM

CVE-2026-7210 The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Microsoft Security Response Center • May 15, 2026

MEDIUM

CVE-2026-8177 XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

Microsoft Security Response Center • May 13, 2026

MEDIUM

CVE-2026-41675 xmldom: XML node injection through unvalidated processing instruction serialization

Microsoft Security Response Center • May 08, 2026

MEDIUM

CVE-2026-41672 xmldom: XML node injection through unvalidated comment serialization

Microsoft Security Response Center • May 08, 2026

MEDIUM

CVE-2026-41673 xmldom: Denial of service via uncontrolled recursion in XML serialization

Microsoft Security Response Center • May 08, 2026

HIGH

NSA GRASSMARLIN

CISA ICS Advisories • Apr 28, 2026

MEDIUM

CVE-2026-41066 lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files

Microsoft Security Response Center • Apr 26, 2026

HIGH

CVE-2026-34601 xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

Microsoft Security Response Center • Apr 15, 2026

MEDIUM

DSA-6182-1 libxml-parser-perl - security update

Debian Security • Mar 28, 2026

HIGH

[UPDATE] [mittel] Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Codeausführung oder Manipulation von Dateien

BSI Germany • Mar 24, 2026

HIGH

[UPDATE] [mittel] Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht DoS und Codeausführung

BSI Germany • Mar 24, 2026

MEDIUM

[UPDATE] [mittel] libxml2: Schwachstelle ermöglicht Manipulation von Dateien

BSI Germany • Mar 24, 2026

LOW

[UPDATE] [niedrig] libxml2: Schwachstelle ermöglicht Denial of Service

BSI Germany • Mar 24, 2026

CRITICAL

[UPDATE] [hoch] libxml2: Mehrere Schwachstellen ermöglichen Denial of Service

BSI Germany • Mar 24, 2026

CRITICAL

[UPDATE] [hoch] libxml2: Schwachstelle ermöglicht XXE Angriffe

BSI Germany • Mar 24, 2026

HIGH

[UPDATE] [hoch] libxml2: Mehrere Schwachstellen

BSI Germany • Mar 24, 2026

HIGH

[UPDATE] [mittel] expat: Schwachstelle ermöglicht Denial of Service

BSI Germany • Mar 11, 2026

MEDIUM

Unexpected security footguns in Go's parsers

Web Discovery • Feb 09, 2026