relaxng parser

The relaxng parser tag covers discussion of libxml2’s RelaxNG handling, with current attention on CVE-2026-0989 and patch readiness. The reported issue involves deeply nested schema includes that can exhaust the call stack and crash vulnerable applications, creating a denial-of-service risk under high-complexity conditions. Coverage emphasizes that the vulnerability requires a network-capable attacker and is not described as remote code execution, credential theft, a wormable Windows takeover, or a data-exfiltration path. This archive is most relevant to administrators, developers, and security teams assessing XML parsing dependencies in applications where externally reachable RelaxNG processing could turn malformed or complex input into an availability problem.