Fluid Attacks Database

Description

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	libxslt	>=0 <1.1.35-1.2	1.1.35-1.2
debian 14	libxslt	>=0 <1.1.35-1.2	1.1.35-1.2
alpine v3.18	libxslt	>=0 <1.1.38-r1	1.1.38-r1
alpine v3.19	libxslt	>=0 <1.1.39-r1	1.1.39-r1
alpine v3.20	libxslt	>=0 <1.1.39-r2	1.1.39-r2
alpine v3.21	libxslt	>=0 <1.1.42-r2	1.1.42-r2
alpine v3.22	libxslt	>=0 <1.1.43-r0	1.1.43-r0
debian 12	libxslt	=1.1.35-1 \|\| >=0 <1.1.35-1+deb12u1	1.1.35-1+deb12u1
alpine v3.23	libxslt	>=0 <1.1.43-r0	1.1.43-r0
rpm rhel7	libxslt	-	-

1-10 of 19

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.