p PatchFirst

CVE-2022-21144

CVE-2022-21144 · Denial of Service (DoS)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash.

CVSS 7.5 · High · EPSS 1.9% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • libxmljs

    Versions
    • ≥ 0, < unspecified: Affected (custom)

    No fix published

  • libxmljs npm

    Affected ranges
    • SEMVER: < 0.19.8

    Update to 0.19.8

Original sources

Check your server →