Skip to content
OpenAdvisories
Critical DLA-1756-1 1 CVE

libxslt - security update

Published Apr 15, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 libxslt 1.1.28-2+deb8u4

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-11068

    Nokogiri vulnerable to libxslt protection mechanism bypass

    libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequentl…

    nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems