An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-94284.json"