Kurz gesagt
- CVE-2022-21144 ist eine Schwachstelle (HOCH (CVSS 7.5)) in libxmljs (libxmljs project), libxmljs.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 80.0% aller Schwachstellen.
- Abhilfe: auf 0.19.8 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| libxmljs | < 0.19.8
| 0.19.8
|
| libxmljs npm | < 0.19.8
| 0.19.8
|
Description
libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
NVD description
This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free