Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Libxmljs Project Clear all filters
TI-2024-22732 CVE-2024-34392 · GHSA-mg49-jqgw-gcj6

libxmljs namespaces type confusion RCE

Priority HIGH 82

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01136 Published 2024-05-02 No fix listed CWE-843
TI-2024-22731 CVE-2024-34391 · GHSA-6433-x5p4-8jc7

libxmljs attrs type confusion RCE

Priority HIGH 76

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01112 Published 2024-05-02 No fix listed CWE-843
TI-2022-05547 CVE-2022-21144 · GHSA-773h-w45w-f2f9

Denial of service (DoS) in libxmljs

Priority LOW 37

This affects all versions of package libxmljs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01918 Published 2022-05-01 Fixed in 0.19.8 CWE-20