In breve
- CVE-2022-21144 è una vulnerabilità ALTO (CVSS 7.5) che riguarda libxmljs (libxmljs project), libxmljs.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 80.0% delle vulnerabilità.
- Correzione: aggiornare a 0.19.8 o successiva.
| Package | Affected versions | Patched versions |
|---|
| libxmljs | < 0.19.8
| 0.19.8
|
| libxmljs npm | < 0.19.8
| 0.19.8
|
Description
libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
NVD description
This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free