DEBIAN-CVE-2022-23308 - debian/libxml2
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: Awaiting approval - bulk import
- 2026-10-29: Awaiting triage - reclassified: OSV Debian bulk import, awaiting triage