npmPackage

libxmljs

4 known vulnerabilities (4 high), with the versions each affects and the releases that fix them.

Latest release: 1.0.11 (Oct 18, 2023): affected by 3 advisories
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 4 · 4 high

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2025-25341High 7.5
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document.
Affected: through 1.0.11.
No fix released. The latest release, 1.0.11, is still affected.
100% of libxmljs downloads last week were affected versions (153.9K).
CVE-2024-34392High 8.1
libxmljs namespaces type confusion RCE
Affected: through 1.0.11; through 1.0.11.
No fix released. The latest release, 1.0.11, is still affected.
100% of libxmljs downloads last week were affected versions (153.9K).
CVE-2024-34391High 8.1
libxmljs attrs type confusion RCE
Affected: through 1.0.11; through 1.0.11.
No fix released. The latest release, 1.0.11, is still affected.
100% of libxmljs downloads last week were affected versions (153.9K).
CVE-2022-21144High 7.5
Denial of Service (DoS)
Affected: fixed in 0.19.8.
Fixed in 0.19.8 (released May 4, 2022, 3 days after disclosure).
The latest release, 1.0.11, is not affected.
5.5% of libxmljs downloads last week were affected versions (8.5K).