BIT-java-2025-7424

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/java/BIT-java-2025-7424.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-java-2025-7424

Aliases

Published

2026-05-06T14:45:48.138Z

Modified

2026-05-08T07:56:10.578353885Z

Summary

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

Details

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

Database specific

{
    "cpes": [
        "cpe:2.3:a:bellsoft:libericajdk:*:*:*:*:*:*:*:*"
    ],
    "severity": "High"
}

References

Affected packages

Bitnami / java

Package

Name: java
Purl: pkg:bitnami/java

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0

Introduced

1.9.0

Fixed

8.0.481

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/java/BIT-java-2025-7424.json"