CVE-2026-0989
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-01-15 15:15:52
Güncelleme
2026-01-16 15:55:33
Source Identifier
secalert@redhat.com
KEV Date Added
-