VDB
JLSEC-2025-78
JLSEC-2025-78
PUBLISHED
CVSS 7.800000190734863 HIGH
Record from OSV · Published October 17, 2025
An issue was discovered in libxml2 before 2.10.3
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| XML2_jll | juliahub.com | 2.10.3+0 |
| XML2_jll | pkg.julialang.org | 2.10.3+0 |
Risk scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Julia | XML2_jll | 0 |
| Julia | XML2_jll | 0 |
Timeline
- Oct 17, 2025 CVE Published
- Jul 18, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln JLSEC-2025-78
vulnetix vdb fixes JLSEC-2025-78
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/JLSEC-2025-78/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://seclists.org/fulldisclosure/2022/Dec/26 url
- http://seclists.org/fulldisclosure/2022/Dec/27 url
- http://seclists.org/fulldisclosure/2022/Dec/21 url
- http://seclists.org/fulldisclosure/2022/Dec/24 url
- http://seclists.org/fulldisclosure/2022/Dec/25 url
- https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b url
- https://gitlab.gnome.org/GNOME/libxml2/-/tags url
- https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3 url
- https://security.netapp.com/advisory/ntap-20221209-0003/ url
- https://support.apple.com/kb/HT213531 url
- https://support.apple.com/kb/HT213533 url
- https://support.apple.com/kb/HT213534 url
- https://support.apple.com/kb/HT213535 url
- https://support.apple.com/kb/HT213536 url