CVE-2022-21144

Summary: CVE-2022-21144 affects all versions of the libxmljs package. The issue occurs when libxmljs.parseXml is called with a non-buffer argument, causing the V8 engine to invoke the argument’s toString method; if toString is not a Function, V8 will crash, leading to a potential denial of servic...

CVE-2025-25341

The libxmljs library (specifically version 1.0.11 ) contains a NULL Pointer Dereference vulnerability during the parsing of specially crafted XML documents. The root cause is improper handling of the internal _ref property on entity_ref and entity_decl nodes, which can trigger a segmentation faul...