Denial of service vulnerability exists in libxmljs

ALTO 7.5CVE-2022-21144 · GHSA-773h-w45w-f2f9 · SNYK-JS-LIBXMLJS-2348756 · Published 01/05/2022 · updated 17/06/2026

Em resumo

CVE-2022-21144 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta libxmljs (libxmljs project), libxmljs.
Chance de exploração nos próximos 30 dias (EPSS): 1.9%, maior que 80.0% das vulnerabilidades.
Correção: atualize para 0.19.8 ou posterior.

Package	Affected versions	Patched versions
libxmljs libxmljs_project	`< 0.19.8`	`0.19.8`
libxmljs npm	`< 0.19.8`	`0.19.8`

Description

libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.

NVD description

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.

References

nvd.nist.gov/vuln/detail/CVE-2022-21144 · ADVISORY
libxmljs/libxmljs#594 · WEB
libxmljs/libxmljs commit 2501807 · WEB
libxmljs/libxmljs · PACKAGE
snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756 · WEB

Mais vulnerabilidades de libxmljs

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libxmljs

libxmljs_project

< 0.19.8

0.19.8

libxmljs

npm

< 0.19.8

0.19.8

Description

NVD description

Mais vulnerabilidades de libxmljs

Ver tudo →