Critical: Three Unpatched Security Vulnerabilities Found in libxslt

libxslt, a sibling project of libxml2, currently lacks an active maintainer and has three unpatched security vulnerabilities. Two have been publicly disclosed (CVE-2025-7424 and CVE-2025-7425), involving type confusion and a heap-based buffer overflow. Patches have been proposed by engineers from Apple and Google on the GNOME GitLab, but remain unapplied due to the lack of a maintainer. This highlights the importance of open-source maintenance and poses a security risk to applications relying on libxslt.