The xslt tag on WindowsForum.com covers discussions about XSLT (Extensible Stylesheet Language Transformations) and related security issues. Recent content highlights CVE-2025-11731, a type confusion vulnerability in libxslt's EXSLT handling that can cause denial of service via crafted stylesheets. This affects applications using libxslt on Windows and Linux, making patching important for developers and administrators. The tag is relevant for those interested in XSLT processing, library security, and software supply chain risks.
-
A newly disclosed vulnerability, tracked as CVE-2025-11731, affects libxslt and stems from a type confusion bug in the library’s EXSLT handling routine exsltFuncResultComp, allowing a specially crafted stylesheet to cause unexpected memory reads and application crashes—effectively a...