mxml vulnerabilities

CVEs whose affected-version data names the mxml package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112094Medium· 5.5

today

michaelrsweet mxml mxml-file.c mxml_load_data use after free

A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. …

▾ Sunlitmichaelrsweet · mxmlvia CVEORG