<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: behaviortree</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-11013: A vulnerability was identified in BehaviorTree up to 4.7.0</title><link>https://patchthecve.com/cve/CVE-2025-11013.html</link><guid>https://patchthecve.com/cve/CVE-2025-11013.html</guid><pubDate>Mon, 19 Oct 2026 16:10:00 +0000</pubDate><description>LOW 3.3: A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local environmen</description></item><item><title>CVE-2025-11012: A vulnerability was determined in BehaviorTree up to 4.7.0</title><link>https://patchthecve.com/cve/CVE-2025-11012.html</link><guid>https://patchthecve.com/cve/CVE-2025-11012.html</guid><pubDate>Mon, 19 Oct 2026 16:10:00 +0000</pubDate><description>MEDIUM 5.3: A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/script_parser.cpp of the component Diagnostic Message Handler. Executing manipulation of the argument error_msgs_buffer can lead to stack-based buffer overflow. The attack can only be e</description></item><item><title>CVE-2025-11011: A vulnerability was found in BehaviorTree up to 4.7.0</title><link>https://patchthecve.com/cve/CVE-2025-11011.html</link><guid>https://patchthecve.com/cve/CVE-2025-11011.html</guid><pubDate>Mon, 19 Oct 2026 16:10:00 +0000</pubDate><description>LOW 3.3: A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/json_export.cpp. Performing manipulation of the argument Source results in null pointer dereference. The attack needs to be approached locally. The exploit has been m</description></item></channel></rss>