{"action":"Upgrade libxslt to 1.1.35-1.2+deb13u1 or later.","affected":[{"fixed":"1.1.35-1.2+deb13u1","introduced":"0"}],"component":"libxslt","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.1.35-1.2+deb13u1"],"id":"tcs_01M5NPDDVRVVXNEX1ZGC9ETXW3","modified_at":"2026-10-13T09:47:30.562020993Z","published_at":"2025-07-10T14:15:27.573Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-7424","https://security-tracker.debian.org/tracker/CVE-2025-7424"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-7424#Debian:13/libxslt","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-7424"}],"summary":"A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows"}