CVE-2026-0989 is a low-severity libxml2 vulnerability disclosed on January 15, 2026, affecting the RelaxNG parser’s handling of nested schema includes and allowing a network-capable attacker, under high-complexity conditions, to crash vulnerable applications through stack exhaustion rather than...