GitHub Advisoryadvisory · npm

GHSA-jv72-59wq-8rxm libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

HIGH Published 2025-12-26 Modified 2025-12-26 Official page ↗
Aliases
CVE-2025-25341
Ecosystem
npm
Packages
libxmljs
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2025-12-26

Affected packages

• npm libxmljs: <= 1.0.11 (no fix yet)

Description

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).

Related

Alias · CVE (1)

  • CVE-2025-25341 A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References