https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T02:35:16.323326+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-13118 CVE-2019-13118 2026-09-29T02:35:16.327106+00:00

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

 https://vulnerability.circl.lu/vuln/ghsa-cf46-6xxh-pc75 GHSA-cf46-6xxh-pc75 — libxslt Type Confusion vulnerability that affects Nokogiri 2026-09-29T02:35:16.327209+00:00

Affected: RubyGems: nokogiri

In `numbers.c` in libxslt 1.1.33, a type holding grouping characters of an `xsl:number` instruction was too narrow and an invalid character/length combination could be passed to `xsltNumberFormatDecimal`, leading to a read of uninitialized stack data.

Nokogiri prior to version 1.10.5 used a vulnerable version of libxslt. Nokogiri 1.10.5 updated libxslt to version 1.1.34 to address this and other vulnerabilities in libxslt.