GHSA-jv72-59wq-8rxmHighCVSS 7.5

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

Published
December 26, 2025
Last Modified
December 26, 2025

🔗 CVE IDs covered (1)

📋 Description

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

🎯 Affected products1

  • npm/libxmljs:<= 1.0.11

🔗 References (3)