Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package libxmljs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (4)
CVE-2024-34391 — CVSS 8.1 (high): libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of…
CVE-2024-34392 — CVSS 8.1 (high): libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function…
CVE-2022-21144 — CVSS 7.5 (high): This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will…
CVE-2025-25341 — CVSS 7.5 (high): A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on…