Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-10911

created 3 months ago

Libxslt: use-after-free with key data stored cross-rvt

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

Affected products

rhcos

libxslt

=<1.1.43

Matching in nixpkgs

pkgs.libxslt

C library and tools to do XSL transformations

nixos-unstable 1.1.43
- nixpkgs-unstable 1.1.43
- nixos-unstable-small 1.1.43

pkgs.python312Packages.libxslt

C library and tools to do XSL transformations

nixos-unstable 1.1.43
- nixpkgs-unstable 1.1.43
- nixos-unstable-small 1.1.43

pkgs.python313Packages.libxslt

C library and tools to do XSL transformations

nixos-unstable 1.1.43
- nixpkgs-unstable 1.1.43
- nixos-unstable-small 1.1.43

Package maintainers

@jtojnar Jan Tojnar <jtojnar@gmail.com>

Suggestion detail

Affected products

Matching in nixpkgs

pkgs.libxslt

pkgs.python312Packages.libxslt

pkgs.python313Packages.libxslt

Package maintainers