BIT-java-min-2025-7424

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/java-min/BIT-java-min-2025-7424.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-java-min-2025-7424

Aliases

Published

2026-05-06T14:45:50.235Z

Modified

2026-05-08T07:56:19.853536518Z

Summary

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Details

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Database specific

{
    "cpes": [
        "cpe:2.3:a:bellsoft:libericajdk:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}

References

Affected packages

Bitnami / java-min

Package

Name: java-min
Purl: pkg:bitnami/java-min

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0

Introduced

1.9.0

Fixed

8.0.481

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/java-min/BIT-java-min-2025-7424.json"