VYPR
← All advisories
Critical severity9.8GHSA Advisory· Published Apr 10, 2019· Updated May 28, 2026

CVE-2019-11068

CVE-2019-11068

Description

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
nokogiriRubyGems
< 1.10.31.10.3

Affected products

506

Patches

Vulnerability mechanics

References

32

News mentions

0

No linked articles in our index yet.