Skip to content

Product

npm libxmljs2 vulnerabilities

2 published CVES affecting npm libxmljs2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm libxmljs2 CVEs

Newest publication first

  1. CVE-2024-34394 libxmljs2 namespaces type confusion RCE

    Published
    HighCVSS 8.1 EPSS 0.99%

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of se...

  2. CVE-2024-34393 libxmljs2 attrs type confusion RCE

    Published
    HighCVSS 8.1 EPSS 0.96%

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64-bit systems), data...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.