CVE-2024-55549 xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in libxslt Affecting XPath Evaluations Two vulnerabilities have been reported in libxslt prior to version 1.1.43. CVE-2024-55549 involves a use-after vulnerability in xsltGetInheritedNsList, while CVE-2025-24855 is a use-after-free issue related to nested XPath evaluations. Both vulnerabilities were published on March 14, 2025, and could potentially impact applications utilizing this library. 2 sources 41