libyang

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

libyang records in CISA KEV

No libyang vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-30002 CVE-2026-41401 · GHSA-v7jp-vmx6-5429

libyang - Heap Use-After-Free Write in XML Metadata Parsing

MEDIUM 64

libyang before 5.4.3 contains a heap use-after-free write vulnerability in lyd_parser_set_data_flags that incorrectly updates metadata list pointers when freeing non-head default metadata entries.

CVSS 4.0MEDIUM 6.9 Network Low privileges No interaction EPSS 0.00673 Published 2026-05-26 Partial fix · 5.4.3 CWE-416

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0