libyang vulnerability

The libyang vulnerability tag covers discussions about CVE-2026-44673, a high-severity integer overflow in the libyang library that can lead to a heap buffer overflow when parsing malicious LYB data. This flaw is listed in Microsoft's Security Update Guide as a supply-chain risk for Windows environments that use network automation stacks, containers, or third-party tools relying on libyang. The vulnerability affects libyang versions before SO 5.2.1 and is not a Windows kernel issue but represents the type of open-source library flaw that Windows administrators must track due to modern infrastructure dependencies.