libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00705·Published 2026-11-05·Fixed in 0.18.6CWE-121