windows dependency risk

The windows dependency risk tag focuses on dependency-level security issues that can affect applications used in Windows environments, including the libxml2 RelaxNG parser vulnerability discussed here. CVE-2026-0989 is a low-severity denial-of-service flaw caused by stack exhaustion when nested schema includes are handled under high-complexity conditions. A network-capable attacker may be able to crash an exposed application, but the issue is not described as Windows takeover, remote code execution, data theft, or credential theft. This tag helps track third-party component exposure, XML parsing paths, Microsoft advisory guidance, and patch readiness as part of practical production risk.