LibXml2 seems to be one of those un glorious packages to maintain. I saw
the following posted by a project maintainer.
https://gitlab.gnome.org/GNOME/libxml2/-/issues/913
His observations on disclosing security vulnerabilities seem to be
interesting.
Brian
--
Brian Lavender
https://www.brie.com/brian/
"There are two ways of constructing a software design. One way is to
make it so simple that there are obviously no deficiencies. And the other
way is to make it so complicated that there are no obvious deficiencies."
Professor C. A. R. Hoare
The 1980 Turing award lecture