← לוח פגיעויות

CVE-2026-0989

נמוכה 3.7

תיאור (מקור, אנגלית)

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

מדדים

CVSS 3.1
3.7 (LOW) מקור הציון: CNA CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS — סבירות ניצול
0% (אחוזון 000) נכון ל-23/9/2026
CWE
CWE-674

מוצרים מושפעים

xmlsoft: libxml2; redhat: hardened images; redhat: jboss core services; redhat: openshift container platform; redhat: enterprise linux; ibm: vios; ibm: aix

קישורים