Skip to content
OpenAdvisories

Package · npm

libxmljs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2025-25341

    libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

    A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

    libxmljs npm
  • High 8.1
    CVE-2024-34392

    libxmljs namespaces type confusion RCE

    libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead …

    libxmljs npm
  • High 8.1
    CVE-2024-34391

    libxmljs attrs type confusion RCE

    libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 6…

    libxmljs npm
  • High 7.5
    CVE-2022-21144

    Denial of Service (DoS)

    This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will cr…

    libxmljs npm