3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +189 more potentially affected by CVE-2024-34392 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2024-34392 Source advisory: OSV:GHSA-MG49-JQGW-GCJ6...

CVE-2024-34392 libxmljs namespaces type confusion RCE

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes wrapxmlNodensDefget on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution...

CVE-2024-34392

CVE-2024-34392 : The libxmljs library (Node.js bindings) is affected by a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which calls _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This can lead to denia...