/ 
XML-LibXML-1.60
Security Advisories (3)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVE-2026-8177 (2026-05-10)

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.

Changes for version 1.60

  • getElementsById corrected to getElementById and the old name kept as an alias. Also re-implemented without XPath for improved performance
  • DOM Level 3 method $attr->isId() added
  • make {get,set,has}Attribute(Node)? methods work with full attribute names rather than just localnames. (Although DOM Level 3 is not very clear about the behavior of these methods for an attributes with namespaces, it certainly does not imply that getAttribute('foo') should return value of a bar:foo, which was the old behavior.)
  • added publicId and systemId methods to XML::LibXML::Dtd

Documentation

XML::LibXML::Attr
XML::LibXML Attribute Class
XML::LibXML::CDATASection
XML::LibXML Class for CDATA Sections
XML::LibXML::Comment
XML::LibXML Comment Class
XML::LibXML::DOM
XML::LibXML DOM Implementation
XML::LibXML::Document
XML::LibXML DOM Document Class
XML::LibXML::DocumentFragment
XML::LibXML's DOM L2 Document Fragment Implementation
XML::LibXML::Dtd
XML::LibXML DTD Handling
XML::LibXML::Element
XML::LibXML Class for Element Nodes
XML::LibXML::InputCallback
XML::LibXML Class for Input Callbacks
XML::LibXML::Namespace
XML::LibXML Namespace Implementation
XML::LibXML::Node
Abstract Base Class of XML::LibXML Nodes
XML::LibXML::PI
XML::LibXML Processing Instructions
XML::LibXML::Parser
Parsing XML Data with XML::LibXML
XML::LibXML::RelaxNG
RelaxNG Schema Validation
XML::LibXML::Schema
XML Schema Validation
XML::LibXML::Text
XML::LibXML Class for Text Nodes

Modules

XML::LibXML
Perl Binding for libxml2
XML::LibXML::Boolean
Boolean true/false values
XML::LibXML::Literal
Simple string values.
XML::LibXML::NodeList
a list of XML document nodes
XML::LibXML::Number
Simple numeric values.
XML::LibXML::SAX
XML::LibXML direct SAX parser
XML::LibXML::SAX::Builder
Building DOM trees from SAX events.
XML::LibXML::SAX::Generator
Generate SAX events from a LibXML tree

Provides

XML::LibXML::Attr
in LibXML.pm
XML::LibXML::CDATASection
in LibXML.pm
XML::LibXML::Comment
in LibXML.pm
XML::LibXML::Document
in LibXML.pm
XML::LibXML::DocumentFragment
in LibXML.pm
XML::LibXML::Dtd
in LibXML.pm
XML::LibXML::Element
in LibXML.pm
XML::LibXML::InputCallback
in LibXML.pm
XML::LibXML::NamedNodeMap
in LibXML.pm
XML::LibXML::Namespace
in LibXML.pm
XML::LibXML::Node
in LibXML.pm
XML::LibXML::PI
in LibXML.pm
XML::LibXML::RelaxNG
in LibXML.pm
XML::LibXML::SAX::AttributeNode
in lib/XML/LibXML/SAX/Generator.pm
XML::LibXML::SAX::Parser
in lib/XML/LibXML/SAX/Parser.pm
XML::LibXML::Schema
in LibXML.pm
XML::LibXML::Text
in LibXML.pm
XML::LibXML::_SAXParser
in LibXML.pm

Examples

Other files