xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
{ "urgency": "not yet assigned" }