AIKIDO-2026-801403

TL;DR

When document() loads the stylesheet that is already running, libxslt uses that stylesheet document as the source document. Stylesheet nodes and source nodes share the psvi field, so a stylesheet that calls document() on itself makes the transform read psvi as the wrong type and can corrupt memory or crash the process. The fix copies the stylesheet document and clears psvi on the copy before reuse.