CVE-2022-21144

Summary: CVE-2022-21144 affects all versions of the libxmljs package. The issue occurs when libxmljs.parseXml is called with a non-buffer argument, causing the V8 engine to invoke the argument’s toString method; if toString is not a Function, V8 will crash, leading to a potential denial of servic...

CVE-2025-25341

CVE-2025-25341 affects libxmljs 1.0.11. The vulnerability occurs when parsing specially crafted XML documents: accessing the internal _ref property on entity_ref and entity_decl nodes can cause a segmentation fault, leading to a denial-of-service. Multiple sources (Red Hat, OSV, NVD, CNNVD, GHSA,...