High DLA-3101-1 2 CVEs

libxslt - security update

Published Sep 9, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	libxslt	1.1.32-2.2~deb10u2

Vulnerabilities 2

High 8.8

CVE-2021-30560 EPSS 20%

Nokogiri has vulnerable dependencies on libxml2 and libxslt

Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Azure Linux Alpine RubyGems

Aug 3, 2021
High 7.5

CVE-2019-5815

Nokogiri implementation of libxslt vulnerable to heap corruption

Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.

Google Chrome chromium nokogiri Browsers Debian Ubuntu RubyGems

Dec 11, 2019