PatchTheCVElibxmljs vulnerabilities and fixes
Recent CVEs affecting libxmljs, with upgrade or downgrade steps. 3 tracked.
libxmljs has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-12-26. Highest priority: CVE-2024-34392 (score 55/100).
- CVE-2025-25341 HIGH 7.5 DOWNGRADE A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document
- CVE-2024-34392 HIGH 8.1 UPGRADE libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking t
- CVE-2024-34391 HIGH 8.1 UPGRADE libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a
FAQ
How do I fix libxmljs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libxmljs being exploited right now?
None of the tracked libxmljs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libxmljs CVE should I patch first?
CVE-2024-34392 currently ranks highest (55/100): libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking t.