GHSA-773h-w45w-f2f9HighCVSS 7.5

Denial of service vulnerability exists in libxmljs

Published
May 3, 2022
Last Modified
August 17, 2023

🔗 CVE IDs covered (1)

CVE-2022-21144 →

📋 Description

libxmljs provides libxml bindings for v8 javascript engine. This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.

🎯 Affected products1

  • npm/libxmljs:< 0.19.8

🔗 References (5)