libxml2 vulnerability

The libxml2 vulnerability tag covers discussion of CVE-2026-0989, a low-severity denial-of-service issue in the RelaxNG parser. The reported flaw involves deeply nested schema includes that can exhaust the stack and crash affected applications when an attacker can reach an exposed XML parsing path under high-complexity conditions. Coverage focuses on the vulnerability’s practical risk, including why it is not a Windows takeover, remote code execution, or credential theft issue, and on patch readiness for production environments. This archive is useful for tracking dependency-level security concerns in applications that rely on libxml2 and assessing whether the affected parser is exposed in your deployment.