| Package | Affected versions | Patched versions |
|---|---|---|
| libxslt | < 1.1.43 | 1.1.43 |
numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free