Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94157.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-94157
Upstream
Published
2026-07-28T15:17:51Z
Modified
2026-09-18T05:34:49Z
Summary
CVE-2026-6879 affecting package docbook5-style-xsl 1.79.2-11
Details

Element.findall() and fully-consumed Element.iterfind() exhibit O(n^2) time complexity when using XPath index predicates (e.g. [1], [last()], [last()-N]) on XML documents with many same-tag siblings. Element.find() is only affected when the first match is near the end  of the sibling list, such as with [last()] or [last()-N].//item[1] short-circuits after the first match.

References

Affected packages

Azure Linux:3 / docbook5-style-xsl

Package

Name
docbook5-style-xsl
Purl
pkg:rpm/azure-linux/docbook5-style-xsl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
1.79.2-11

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94157.json"