CVE-2024-34392

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes wrapxmlNodensDefget on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution...

CVE-2024-34391

libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop a...

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2025-25341 via libxmljs (>=0.10.0 <=1.0.9)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2025-25341 Source advisory: SNYK:JS-LIBXMLJS-14723210...

EUVD-2022-2933

Malicious code in bioql PyPI...

EUVD-2024-1688

Malicious code in bioql PyPI...

EUVD-2024-1447

Malicious code in bioql PyPI...

3loc (>=0.1.0 <=0.4.0), 3scale (>=0.2.0 <=0.6.2) +657 more potentially affected by CVE-2024-34392 via libxmljs (>=0.10.0 <=1.0.11)

libxmljs NPM version =0.10.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =4.0.1, =1.10.4, =1.8.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.2.0 and more Source cves: CVE-2024-34392 Source advisory: OSV:GHSA-MG49-JQGW-GCJ6...

CVE-2024-34392

CVE-2024-34392 : The libxmljs library (Node.js bindings) is affected by a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which calls _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This can lead to denia...

3loc (>=0.1.0 <=0.4.0), 3scale (=0.2.0) +426 more potentially affected by CVE-2022-21144 via libxmljs (>=0.10.0 <=0.19.7)

libxmljs NPM version =0.10.0, =0.1.0, =0.0.1, =4.0.1, =1.5.8, =1.5.1, =1.8.3, =0.1.0, =1.0.1, =1.0.0, =1.1.0, =1.20.0, =0.0.5, =0.1.0, =0.7.0 and more Source cves: CVE-2022-21144 Source advisory: SNYK:JS-LIBXMLJS-2348756...