Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-74860
By Omri Boiman |
8 September 2026
CVE-2026-74860 – libxml2 Python SAX DTD parsing double-free triggers crash in XML processing
libxml2 with Python bindings enabled is vulnerable to a double-free in the SAX attributeDecl callback when parsing attacker-supplied XML containing a DTD with enumerated attribute values. The string is freed twice, causing a reproducible crash and DoS in Python apps using libxml2 SAX bindings. Upgrade libxml2 per vendor advisories.