{"schema_version":1,"title":"Gnome Libxslt vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Gnome Libxslt: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-11731, was published on 14 October 2025.","url":"https://junglewise.ai/threats/technologies/libxslt","json_url":"https://junglewise.ai/threats/technologies/libxslt.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/libxslt","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":7,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":1},"latest":[{"cve":"CVE-2025-11731","cvss":3.1,"epss":0.0026,"slug":"cve-2025-11731-gnome-libxslt-type-confusion-in-exsltfuncresultcomp","title":"GNOME libxslt type confusion in exsltFuncResultComp","severity":"low","exploited":false,"published_at":"2025-10-14T06:15:34.483+00:00","url":"https://junglewise.ai/threats/cve-2025-11731-gnome-libxslt-type-confusion-in-exsltfuncresultcomp"},{"cve":"CVE-2025-10911","cvss":5.5,"epss":0.0014,"slug":"cve-2025-10911-gnome-libxslt-use-after-free-in-xsl-node-parsing","title":"GNOME libxslt use-after-free in XSL node parsing","severity":"medium","exploited":false,"published_at":"2025-09-25T16:15:31.337+00:00","url":"https://junglewise.ai/threats/cve-2025-10911-gnome-libxslt-use-after-free-in-xsl-node-parsing"},{"cve":"CVE-2025-7425","cvss":7.8,"epss":0.0034,"slug":"cve-2025-7425-gnome-libxslt-heap-use-after-free-in-attribute-management","title":"GNOME libxslt heap use-after-free in attribute management","severity":"high","exploited":false,"published_at":"2025-07-10T14:15:27.877+00:00","url":"https://junglewise.ai/threats/cve-2025-7425-gnome-libxslt-heap-use-after-free-in-attribute-management"},{"cve":"CVE-2025-7424","cvss":7.5,"epss":0.012,"slug":"cve-2025-7424-gnome-libxslt-type-confusion-in-xmlnode-psvi-field","title":"GNOME libxslt type confusion in xmlNode psvi field","severity":"high","exploited":false,"published_at":"2025-07-10T14:15:27.573+00:00","url":"https://junglewise.ai/threats/cve-2025-7424-gnome-libxslt-type-confusion-in-xmlnode-psvi-field"},{"cve":"CVE-2019-13118","cvss":7.5,"epss":0.0101,"slug":"cve-2019-13118-nokogiri-libxslt-type-confusion-in-xsl-number-instruction","title":"Nokogiri libxslt type confusion in xsl:number instruction","severity":"high","exploited":false,"published_at":"2022-05-24T16:49:07+00:00","url":"https://junglewise.ai/threats/cve-2019-13118-nokogiri-libxslt-type-confusion-in-xsl-number-instruction"},{"cve":"CVE-2019-13117","cvss":5.3,"epss":0.0438,"slug":"cve-2019-13117-nokogiri-uninitialized-read-in-libxslt-xsl-number-processing","title":"Nokogiri uninitialized read in libxslt xsl:number processing","severity":"medium","exploited":false,"published_at":"2022-05-24T16:49:06+00:00","url":"https://junglewise.ai/threats/cve-2019-13117-nokogiri-uninitialized-read-in-libxslt-xsl-number-processing"},{"cve":"CVE-2019-11068","cvss":9.8,"epss":0.0113,"slug":"cve-2019-11068-nokogiri-libxslt-protection-mechanism-bypass-via-crafted-url","title":"Nokogiri libxslt protection mechanism bypass via crafted URL","severity":"critical","exploited":false,"published_at":"2022-05-13T01:21:57+00:00","url":"https://junglewise.ai/threats/cve-2019-11068-nokogiri-libxslt-protection-mechanism-bypass-via-crafted-url"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Gnome Libsoup","slug":"libsoup","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/libsoup"},{"name":"Gnome GLib","slug":"glib","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/glib"},{"name":"Gnome Gdk-Pixbuf","slug":"gdk-pixbuf","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/gdk-pixbuf"},{"name":"Gnome Gvfs","slug":"gvfs","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/gvfs"},{"name":"Gnome Localsearch","slug":"localsearch","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/localsearch"},{"name":"Gnome Glib-Networking","slug":"glib-networking","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/glib-networking"}],"technology":{"hub":true,"name":"Gnome Libxslt","slug":"libxslt","vendor":{"name":"Gnome","slug":"gnome","url":"https://junglewise.ai/threats/vendors/gnome"},"aliases":[],"category":"library","homepage":"https://gitlab.gnome.org/GNOME/libxslt","repo_url":"https://gitlab.gnome.org/GNOME/libxslt.git","description":"libxslt is the C library which allows to manipulate XML files using XSLT (eXtensible Stylesheet Language Transformations).","url":"https://junglewise.ai/threats/technologies/libxslt"},"most_severe":[{"cve":"CVE-2019-11068","cvss":9.8,"epss":0.0113,"slug":"cve-2019-11068-nokogiri-libxslt-protection-mechanism-bypass-via-crafted-url","title":"Nokogiri libxslt protection mechanism bypass via crafted URL","severity":"critical","exploited":false,"published_at":"2022-05-13T01:21:57+00:00","url":"https://junglewise.ai/threats/cve-2019-11068-nokogiri-libxslt-protection-mechanism-bypass-via-crafted-url"},{"cve":"CVE-2025-7425","cvss":7.8,"epss":0.0034,"slug":"cve-2025-7425-gnome-libxslt-heap-use-after-free-in-attribute-management","title":"GNOME libxslt heap use-after-free in attribute management","severity":"high","exploited":false,"published_at":"2025-07-10T14:15:27.877+00:00","url":"https://junglewise.ai/threats/cve-2025-7425-gnome-libxslt-heap-use-after-free-in-attribute-management"},{"cve":"CVE-2025-7424","cvss":7.5,"epss":0.012,"slug":"cve-2025-7424-gnome-libxslt-type-confusion-in-xmlnode-psvi-field","title":"GNOME libxslt type confusion in xmlNode psvi field","severity":"high","exploited":false,"published_at":"2025-07-10T14:15:27.573+00:00","url":"https://junglewise.ai/threats/cve-2025-7424-gnome-libxslt-type-confusion-in-xmlnode-psvi-field"},{"cve":"CVE-2019-13118","cvss":7.5,"epss":0.0101,"slug":"cve-2019-13118-nokogiri-libxslt-type-confusion-in-xsl-number-instruction","title":"Nokogiri libxslt type confusion in xsl:number instruction","severity":"high","exploited":false,"published_at":"2022-05-24T16:49:07+00:00","url":"https://junglewise.ai/threats/cve-2019-13118-nokogiri-libxslt-type-confusion-in-xsl-number-instruction"},{"cve":"CVE-2025-10911","cvss":5.5,"epss":0.0014,"slug":"cve-2025-10911-gnome-libxslt-use-after-free-in-xsl-node-parsing","title":"GNOME libxslt use-after-free in XSL node parsing","severity":"medium","exploited":false,"published_at":"2025-09-25T16:15:31.337+00:00","url":"https://junglewise.ai/threats/cve-2025-10911-gnome-libxslt-use-after-free-in-xsl-node-parsing"},{"cve":"CVE-2019-13117","cvss":5.3,"epss":0.0438,"slug":"cve-2019-13117-nokogiri-uninitialized-read-in-libxslt-xsl-number-processing","title":"Nokogiri uninitialized read in libxslt xsl:number processing","severity":"medium","exploited":false,"published_at":"2022-05-24T16:49:06+00:00","url":"https://junglewise.ai/threats/cve-2019-13117-nokogiri-uninitialized-read-in-libxslt-xsl-number-processing"},{"cve":"CVE-2025-11731","cvss":3.1,"epss":0.0026,"slug":"cve-2025-11731-gnome-libxslt-type-confusion-in-exsltfuncresultcomp","title":"GNOME libxslt type confusion in exsltFuncResultComp","severity":"low","exploited":false,"published_at":"2025-10-14T06:15:34.483+00:00","url":"https://junglewise.ai/threats/cve-2025-11731-gnome-libxslt-type-confusion-in-exsltfuncresultcomp"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}