Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Librsvg: use-after-free when xml includes have duplicated entities
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-96889- Public snapshot refreshed
- today 18:36 UTC
- Distinct source events
- 20
- Source records represented
- 20
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Thu 29 Oct · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Thu 29 Oct · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Thu 29 Oct · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Thu 29 Oct · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …CVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Fri 30 Oct · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Sat 31 Oct · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Sat 31 Oct · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …CVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Sun 1 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Tue 3 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Tue 3 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Wed 4 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Wed 4 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Wed 4 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …CVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Thu 5 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Thu 5 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Sat 7 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Mon 9 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Wed 11 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Wed 11 Nov · Dated source evidence · Affected-version evidence changed Librsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Wed 11 Nov · Dated source evidence · Advisory content revised A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees …EUVD-2026-85608 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.