[
  {"cve_id":"CVE-2025-6021","description":"A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.","exploit_maturity":"Proof of concept only","published":"2025-06-12","resolved":"OUT-OF-SCOPE","severity":"High"},
  {"cve_id":"CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.","exploit_maturity":"No public exploit","published":"2025-02-18","resolved":"NOT-APPLICABLE","severity":"High"},
  {"cve_id":"CVE-2024-25062","description":"An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.","exploit_maturity":"No public exploit","published":"2024-02-04","resolved":"NOT-APPLICABLE","severity":"High"}
]