Approved changes feed: RSS · Atom

cpe:2.3:a:xmlsoft:libxslt:1.1.25:*:*:*:*:*:*:*

part: a version: 1.1.25 update: *

VendorXmlsoft (be3c3366-cde4-54a5-8785-eb1f04df6881)
ProductLibxslt (9dcdf0d8-a99c-518f-887f-5cc8a5a57af8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/coapp-packages/libxslt purl2cpe 2026-06-01 10:12:19.484315
pkg:github/gnome/libxslt purl2cpe 2026-06-01 10:12:19.484316
pkg:gitlab/redhat/libxslt purl2cpe 2026-06-01 10:12:19.484318
pkg:nuget/libxslt purl2cpe 2026-06-01 10:12:19.484319
pkg:rpm/fedora/libxslt purl2cpe 2026-06-01 10:12:19.484320
pkg:rpm/opensuse/libxslt purl2cpe 2026-06-01 10:12:19.484322

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6139 vulnerable 2026-06-08 05:02:59.720475 Details available
libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (2) uninitialized variable to the xsltDocumentFunction function in functions.c.
Published: 2013-04-12T22:00:00.000Z
Updated: 2024-08-06T21:28:39.419Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.