DEBIAN-CVE-2026-86139 - debian/libxml2
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
CWE-190 / CVSS 6.9 (MEDIUM)
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: Awaiting approval - bulk import
- 2026-10-29: Awaiting triage - reclassified: OSV Debian bulk import, awaiting triage