Libxmljs Project - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2025-12-26.

Products

CVE-2025-25341 - CVSS 7.5 (high), 2025-12-26: A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and…
CVE-2024-34393 - CVSS 8.1 (high), 2024-05-02: libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was…
CVE-2024-34392 - CVSS 9.8 (critical), 2024-05-02: libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes…
CVE-2024-34391 - CVSS 9.8 (critical), 2024-05-02: libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was…
CVE-2022-21144 - CVSS 7.5 (high), 2022-05-01: This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the…