Skip to content
OpenAdvisories
High · 7.5 CVE-2025-25341 EUVD-2025-205443GHSA-jv72-59wq-8rxm

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

Published Dec 26, 2025 · Updated Dec 26, 2025 · Assigned by mitre

Description

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

Affected packages

EcosystemPackageAffectedFixedRecord
npm libxmljs <= 1.0.11 — GHSA-jv72-59wq-8rxm

References