Skip to content
OpenAdvisories
High · 7.5 CVE-2022-21144 EUVD-2022-2933GHSA-773h-w45w-f2f9SNYK-JS-LIBXMLJS-2348756

Denial of Service (DoS)

Published May 1, 2022 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.

Affected products

VendorProductAffectedFixed
— libxmljs < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm libxmljs < 0.19.8 0.19.8 GHSA-773h-w45w-f2f9

References