Threats affecting pkg:github/libnxml

libnxml versions before 0.18.6 have a stack-based buffer overflow vulnerability in the nxml_parser.c source file. This flaw allows remote attackers to cause a crash or potentially execute code by supplying XML or RSS feeds with very long element, attribute, DOCTYPE, or entity names (up to 1022 characters) ending with a multi-byte UTF-8 character. The vulnerability is fixed in version 0.18.6.