{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libxslt","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NBCVE7SJM61X37EHWW2CF9","modified_at":"2026-09-09T07:01:48.408767315Z","published_at":"2017-04-05T21:59:00.147Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-9019","https://security-tracker.debian.org/tracker/CVE-2015-9019"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-9019#Debian:13/libxslt","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-9019"}],"summary":"In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage of this function to produce predictable outputs."}