Skip to content
OpenAdvisories

Package · npm

libxmljs2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2024-34394

    libxmljs2 namespaces type confusion RCE

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can…

    libxmljs2 npm
  • High 8.1
    CVE-2024-34393

    libxmljs2 attrs type confusion RCE

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and …

    libxmljs2 npm