<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 05:50:33 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-40896</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-40896</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libxml2&lt;/p&gt;
&lt;p&gt;In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &amp;#34;checked&amp;#34;). This makes classic XXE attacks possible.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; libxml2&lt;/p&gt;
&lt;p&gt;In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting &amp;#34;checked&amp;#34;). This makes classic XXE attacks possible.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-40896</guid>
    </item>
  </channel>
</rss>
