/ 
XML-LibXML-1.61
Security Advisories (3)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVE-2026-8177 (2026-05-10)

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.

Changes for version 1.61

  • get{Elements,Children}By{TagName,TagNameNS,LocalName} now obey wildcards '*', getChildrenByLocalName was added.
  • XML::LibXML::XPathContext merged in
  • many new tests added
  • the module should now be fully compatibile with libxml2 >= 2.6.16 (some older versions compile but have problems with namespaced attributes)
  • threads test skipped by default
  • documentation updates (namely DOM namespace conformance in XML::LibXML::DOM)
  • added setNamespaceDecl{URI,Prefix}
  • get/setAttribute(NS)? implementation made xmlns aware
  • all sub-modules have the same version as XML::LibXML

Documentation

XML::LibXML::Attr
XML::LibXML Attribute Class
XML::LibXML::CDATASection
XML::LibXML Class for CDATA Sections
XML::LibXML::Comment
XML::LibXML Comment Class
XML::LibXML::DOM
XML::LibXML DOM Implementation
XML::LibXML::Document
XML::LibXML DOM Document Class
XML::LibXML::DocumentFragment
XML::LibXML's DOM L2 Document Fragment Implementation
XML::LibXML::Dtd
XML::LibXML DTD Handling
XML::LibXML::Element
XML::LibXML Class for Element Nodes
XML::LibXML::InputCallback
XML::LibXML Class for Input Callbacks
XML::LibXML::Namespace
XML::LibXML Namespace Implementation
XML::LibXML::Node
Abstract Base Class of XML::LibXML Nodes
XML::LibXML::PI
XML::LibXML Processing Instructions
XML::LibXML::Parser
Parsing XML Data with XML::LibXML
XML::LibXML::RelaxNG
RelaxNG Schema Validation
XML::LibXML::Schema
XML Schema Validation
XML::LibXML::Text
XML::LibXML Class for Text Nodes

Modules

XML::LibXML
Perl Binding for libxml2
XML::LibXML::Boolean
Boolean true/false values
XML::LibXML::Literal
Simple string values.
XML::LibXML::NodeList
a list of XML document nodes
XML::LibXML::Number
Simple numeric values.
XML::LibXML::SAX
XML::LibXML direct SAX parser
XML::LibXML::SAX::Builder
Building DOM trees from SAX events.
XML::LibXML::SAX::Generator
Generate SAX events from a LibXML tree

Provides

XML::LibXML::Attr
in LibXML.pm
XML::LibXML::CDATASection
in LibXML.pm
XML::LibXML::Comment
in LibXML.pm
XML::LibXML::Document
in LibXML.pm
XML::LibXML::DocumentFragment
in LibXML.pm
XML::LibXML::Dtd
in LibXML.pm
XML::LibXML::Element
in LibXML.pm
XML::LibXML::InputCallback
in LibXML.pm
XML::LibXML::NamedNodeMap
in LibXML.pm
XML::LibXML::Namespace
in LibXML.pm
XML::LibXML::Node
in LibXML.pm
XML::LibXML::PI
in LibXML.pm
XML::LibXML::RelaxNG
in LibXML.pm
XML::LibXML::SAX::AttributeNode
in lib/XML/LibXML/SAX/Generator.pm
XML::LibXML::SAX::Parser
in lib/XML/LibXML/SAX/Parser.pm
XML::LibXML::Schema
in LibXML.pm
XML::LibXML::Text
in LibXML.pm
XML::LibXML::XPathContext
in lib/XML/LibXML/XPathContext.pm
XML::LibXML::_SAXParser
in LibXML.pm

Examples

Other files