Lucene search
K

30 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 12:57 p.m.2 views

Malicious code in libxmljs2-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392c5138d36ba42a009c8a27d8f4c158141a814c9990c022b422f540945e71e5 The package libxmljs2-malicious was found to contain malicious code...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/18 12:57 p.m.1 views

MAL-2026-1775 Malicious code in libxmljs2-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392c5138d36ba42a009c8a27d8f4c158141a814c9990c022b422f540945e71e5 The package libxmljs2-malicious was found to contain malicious code...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/18 12:57 p.m.1 views

MAL-2026-1774 Malicious code in libxmljs2-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080d064e9c79a741220b57667af951576d2d474fa6f9740d0d691abfe832656e The package libxmljs2-1 was found to contain malicious code...

5.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 12:57 p.m.2 views

Malicious code in libxmljs2-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080d064e9c79a741220b57667af951576d2d474fa6f9740d0d691abfe832656e The package libxmljs2-1 was found to contain malicious code...

5.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 12:35 p.m.2 views

Malicious code in @vampirchik147/libxmljs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1f47e6141b6c2d1af00b86d33d71cac6c53f6e64f307e1533e4ae108560092 The package @vampirchik147/libxmljs2 was found to contain malicious code...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.4 views

CVE-2024-34393

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop...

8.1CVSS7.6AI score0.02696EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-1484

Malicious code in bioql PyPI...

8.1CVSS7.9AI score0.0382EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-1690

Malicious code in bioql PyPI...

8.1CVSS7.9AI score0.02696EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 11:31 a.m.3 views

CVE-2024-34394

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

8.1CVSS7.2AI score0.0382EPSS
Exploits0References1
Veracode
Veracode
added 2024/05/06 6:0 a.m.13 views

Type Confusion

libxmljs2 is vulnerable to Type Confusion. The vulnerability is caused by parsing a specially crafted XML documented due to invoking the namespaces function on a grand-child node that refers to an entity. This allows an attacker to execute arbitrary code, or cause Denial of Service DoS...

8.1CVSS8.3AI score0.0382EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2024/05/06 5:6 a.m.17 views

Type Confusion

libxmljs2 is vulnerable to Type Confusion. The vulnerability is caused by improper type checks when parsing untrusted XML with a DOCTYPE that contains an entity due to invoking the attrs function on the grandchild node referring the entity. This can lead to Denial of Service, Data Exfiltration, a...

8.1CVSS7.5AI score0.02696EPSS
Exploits0References3Affected Software1
vulnersOsv
vulnersOsv
added 2024/05/02 9:30 p.m.1 views

@128technology/ply (>=1.0.0-alpha.0 <=1.0.0-alpha.7), @128technology/yinz (=5.0.0-alpha.6) +87 more potentially affected by CVE-2024-34393 via libxmljs2 (>=0.21.7 <=0.33.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =2.4.0, =1.14.0, =1.0.0, =3.0.0, =6.0.0, =6.0.0, =11.0.0, =6.0.0, =6.0.0, =0.186.0, =1.205.5 and more Source cves: CVE-2024-34393 Source advisory: OSV:GHSA-MJR4-7XG5-PFVH...

8.1CVSS7.2AI score0.02696EPSS
Exploits0
OSV
OSV
added 2024/05/02 9:30 p.m.0 views

GHSA-78H3-PG4X-J8CV libxmljs2 vulnerable to type confusion when parsing specially crafted XML

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

9.2CVSS7.4AI score0.0382EPSS
Exploits0References4
vulnersOsv
vulnersOsv
added 2024/05/02 9:30 p.m.2 views

@128technology/ply (>=1.0.0-alpha.0 <=1.0.0-alpha.7), @128technology/yinz (=5.0.0-alpha.6) +100 more potentially affected by CVE-2024-34394 via libxmljs2 (>=0.21.7 <=0.35.0)

libxmljs2 NPM version =0.21.7, =1.0.0-alpha.0, =5.0.0, =1.2.0, =2.4.0, =1.0.0, =1.14.0, =1.0.0, =3.0.0, =0.0.1-beta, =6.0.0, =6.0.0, =11.0.0, =23.14.1-alpha.0 and more Source cves: CVE-2024-34394 Source advisory: OSV:GHSA-78H3-PG4X-J8CV...

8.1CVSS7.2AI score0.0382EPSS
Exploits0
OSV
OSV
added 2024/05/02 9:30 p.m.1 views

GHSA-MJR4-7XG5-PFVH libxmljs2 type confusion vulnerability when parsing specially crafted XML

libxmljs2 is vulnerable to type confusion when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop and remote code...

9.2CVSS6.5AI score0.02696EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/05/02 9:30 p.m.36 views

libxmljs2 type confusion vulnerability when parsing specially crafted XML

libxmljs2 is vulnerable to type confusion when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop and remote code...

8.1CVSS8AI score0.02696EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/05/02 9:30 p.m.33 views

libxmljs2 vulnerable to type confusion when parsing specially crafted XML

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

8.1CVSS8.2AI score0.0382EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/05/02 7:15 p.m.7 views

CVE-2024-34394

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

8.1CVSS8.3AI score0.0382EPSS
Exploits0References2
OSV
OSV
added 2024/05/02 7:15 p.m.0 views

CVE-2024-34394

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces function which invokes XmlNode::getlocalnamespaces on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code...

8.1CVSS6.1AI score0.0382EPSS
Exploits0References2
NVD
NVD
added 2024/05/02 7:15 p.m.11 views

CVE-2024-34393

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs that was called on a parsed node. This vulnerability might lead to denial of service on both 32-bit systems and 64-bit systems, data leak, infinite loop...

8.1CVSS8.3AI score0.02696EPSS
Exploits0References2
Rows per page
Query Builder