Lucene search
K

61 matches found

Veracode
Veracode
added 2026/04/21 8:40 a.m.4 views

Denial-Of-Service (DoS)

libxmljs is vulnerable to a segmentation fault leading to denial-of-service DoS. The vulnerability is due to improper handling of the internal ref property in entityref and entitydecl nodes when parsing specially crafted XML documents, which allows an attacker to trigger a crash by supplying...

7.5CVSS5.7AI score0.00027EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2026/03/18 12:57 p.m.2 views

MAL-2026-1773 Malicious code in libxmljs13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38dafad617301c1edf5722feddd7023a1e39feb06be970b19e713e38d0038ff7 The package libxmljs13 was found to contain malicious code...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 8:35 a.m.4 views

CVE-2024-34392

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes wrapxmlNodensDefget on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution...

9.8CVSS7.2AI score0.04115EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.5 views

CVE-2024-34391

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop a...

9.8CVSS7.6AI score0.04115EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/27 12:5 a.m.3 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.9AI score0.00027EPSS
Exploits1References1
vulnersOsv
vulnersOsv
added 2025/12/26 3:30 p.m.3 views

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.11)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

7.5CVSS5.8AI score0.00027EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2025/12/26 3:30 p.m.4 views

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.9)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...

7.5CVSS5.8AI score0.00027EPSS
Exploits1
Snyk
Snyk
added 2025/12/26 3:30 p.m.2 views

NULL Pointer Dereference

Overview libxmljs is a libxml bindings for v8 javascript engine Affected versions of this package are vulnerable to NULL Pointer Dereference in the parsing process of specially crafted XML documents when accessing the ref property on entityref and entitydecl nodes. An attacker can cause a...

8.7CVSS6.8AI score0.00027EPSS
Exploits1References2
OSV
OSV
added 2025/12/26 3:30 p.m.2 views

GHSA-JV72-59WQ-8RXM libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS5.9AI score0.00027EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2025/12/26 3:30 p.m.5 views

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.9AI score0.00027EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2025/12/26 3:15 p.m.3 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS0.00027EPSS
Exploits1References1
OSV
OSV
added 2025/12/26 3:15 p.m.2 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.8AI score
Exploits0References1
EUVD
EUVD
added 2025/12/26 12:0 a.m.3 views

EUVD-2025-205443

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.4AI score0.00027EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/12/26 12:0 a.m.20 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

0.00027EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/26 12:0 a.m.2 views

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

7.5CVSS6.5AI score0.00027EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/26 12:0 a.m.2 views

libxmljs 安全漏洞

libxmljs is the LibXML binding for node.js of the libxmljs open source. A security vulnerability exists in libxmljs version 1.0.11, which stems from the fact that accessing the internalref attribute of the entityref and entitydecl nodes when parsing a specially crafted XML document may result in ...

7.5CVSS6.4AI score0.00027EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/12/26 12:0 a.m.1 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

6.5AI score0.00027EPSS
Exploits1References1
CVE
CVE
added 2025/12/26 12:0 a.m.7 views

CVE-2025-25341

CVE-2025-25341 affects libxmljs 1.0.11. The vulnerability occurs when parsing specially crafted XML documents: accessing the internal _ref property on entity_ref and entity_decl nodes can cause a segmentation fault, leading to a denial-of-service. Multiple sources (Red Hat, OSV, NVD, CNNVD, GHSA,...

7.5CVSS6.5AI score0.00027EPSS
Exploits1References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-2933

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00154EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-1688

Malicious code in bioql PyPI...

8.1CVSS7.9AI score0.04115EPSS
Exploits1References5
Rows per page
Query Builder