En resumen
- CVE-2022-21144 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a libxmljs (libxmljs project), libxmljs.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 80.0% de las vulnerabilidades.
- Solución: actualizar a 0.19.8 o posterior.
| Package | Affected versions | Patched versions |
|---|
| libxmljs | < 0.19.8
| 0.19.8
|
| libxmljs npm | < 0.19.8
| 0.19.8
|
Description
libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
NVD description
This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free