[automatic] Update 27 advisories for XML2_jll and XSLT_jll

[jlsec-bot]

This action searched --project=libxml2, checking 100 (+0) advisories from NVD and 6 (+1) from EUVD for advisories that pertain here. It identified 27 advisories as being related to the Julia package(s): XML2_jll, and XSLT_jll.

27 advisories found concrete vulnerable ranges

• CVE-2016-3709 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2019-19956 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.10+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2019-20388 for packages: XML2_jll
  • XML2_jll computed [">= 2.9.10+0, < 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2020-24977 for packages: XML2_jll
  • XML2_jll computed [">= 2.9.10+0, < 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2020-7595 for packages: XML2_jll
  • XML2_jll computed [">= 2.9.10+0, < 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2021-3517 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2021-3518 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2021-3537 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2021-3541 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.12+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2022-23308 for packages: XML2_jll
  • XML2_jll computed ["< 2.9.14+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2022-29824 for packages: XML2_jll, and XSLT_jll
  • XML2_jll computed ["< 2.9.14+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
  • XSLT_jll computed ["< 1.1.41+0"]. Its latest version (1.1.43+0) has components: {libxslt = "1.1.43"}
• CVE-2022-40303 for packages: XML2_jll
  • XML2_jll computed ["< 2.10.3+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2022-40304 for packages: XML2_jll
  • XML2_jll computed ["< 2.10.3+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2022-49043 for packages: XML2_jll
  • XML2_jll computed ["< 2.12.0+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2023-28484 for packages: XML2_jll
  • XML2_jll computed ["< 2.10.4+0", ">= 2.11.5+0, < 2.12.0+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2023-29469 for packages: XML2_jll
  • XML2_jll computed ["< 2.10.4+0", ">= 2.11.5+0, < 2.12.0+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2023-39615 for packages: XML2_jll
  • XML2_jll computed [">= 2.11.5+0, < 2.12.0+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2023-45322 for packages: XML2_jll
  • XML2_jll computed ["< 2.12.0+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2024-25062 for packages: XML2_jll
  • XML2_jll computed ["< 2.12.5+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2024-34459 for packages: XML2_jll
  • XML2_jll computed ["< 2.12.7+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2024-56171 for packages: XML2_jll
  • XML2_jll computed ["< 2.13.6+1"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-24928 for packages: XML2_jll
  • XML2_jll computed ["< 2.13.6+1"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-27113 for packages: XML2_jll
  • XML2_jll computed ["< 2.13.6+1"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-32414 for packages: XML2_jll
  • XML2_jll computed ["< 2.13.8+0", ">= 2.14.1+0, < 2.14.4+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-32415 for packages: XML2_jll
  • XML2_jll computed ["< 2.13.8+0", ">= 2.14.1+0, < 2.14.4+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-6021 for packages: XML2_jll
  • XML2_jll computed ["< 2.14.4+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}
• CVE-2025-9714 for packages: XML2_jll
  • XML2_jll computed ["< 2.10.3+0"]. Its latest version (2.15.1+0) has components: {libxml2 = "2.15.1"}