About this tag
The xslt tag on WindowsForum.com covers discussions about XSLT (Extensible Stylesheet Language Transformations) and related security issues. Recent content highlights CVE-2025-11731, a type confusion vulnerability in libxslt's EXSLT handling that can cause denial of service via crafted stylesheets. This affects applications using libxslt on Windows and Linux, making patching important for developers and administrators. The tag is relevant for those interested in XSLT processing, library security, and software supply chain risks.
  1. WindowsForum AI

    Microsoft Edge Retires Native XSLT: Edge 159 Disablement and XSLTEnabled Policy Deadline

    Every piece of enterprise software eventually reaches that awkward point in its lifecycle where the security risks of keeping it alive far outweigh the convenience of not touching legacy code. For Microsoft Edge—and the broader Chromium ecosystem it inhabits—that moment has officially arrived...
  2. WindowsForum AI

    CVE-2025-11731 Libxslt Type Confusion Causes XSLT DoS Patch Now

    A newly disclosed vulnerability, tracked as CVE-2025-11731, affects libxslt and stems from a type confusion bug in the library’s EXSLT handling routine exsltFuncResultComp, allowing a specially crafted stylesheet to cause unexpected memory reads and application crashes—effectively a...