Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-0989

Опубликовано: 15 янв. 2026
Источник: nvd
CVSS3: 3.7
EPSS Низкий

Описание

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

EPSS

Процентиль: 18%
0.00059
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 3.7
ubuntu
23 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

CVSS3: 3.7
debian
23 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how ...

suse-cvrf
9 дней назад

Security update for libxml2

suse-cvrf
9 дней назад

Security update for libxml2

CVSS3: 3.7
github
23 дня назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

EPSS

Процентиль: 18%
0.00059
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674