Skip to content

CVE record · 2 sources

CVE-2026-101019

CVSS 6.5

Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2…

Vendor: Canonical, Oracle
Product: canonical, java
CVSS: 6.5
EPSS: 0.008 (p58)
Exposure class: Web platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

22

CCCS advisory CCCS 16d ago

F5 security advisory (AV26-1049)

CVE-2026-101019 CVE-2026-104939 CVE-2026-15176 F5
8

CVE NVD 17d ago

Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2…

Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the…

CVSS 6.5 CVE-2026-101019 Canonical Oracle