Read the docs

Libxmljs Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Libxmljs Project records in CISA KEV

No Libxmljs Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libxmljs 4 records HIGH

Records

4 records in Libxmljs · all components

TI-2024-22732 CVE-2024-34392 · GHSA-mg49-jqgw-gcj6

libxmljs namespaces type confusion RCE

Priority HIGH 82

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2024-05-02 No fix listed CWE-843
TI-2024-22731 CVE-2024-34391 · GHSA-6433-x5p4-8jc7

libxmljs attrs type confusion RCE

Priority HIGH 76

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01112 Published 2024-05-02 No fix listed CWE-843
TI-2022-05547 CVE-2022-21144 · GHSA-773h-w45w-f2f9

Denial of service (DoS) in libxmljs

Priority LOW 37

This affects all versions of package libxmljs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01918 Published 2022-05-01 Fixed in 0.19.8 CWE-20
Open these records in search →