https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-25341.htmlhttps://patchthecve.com/cve/CVE-2025-25341.htmlTue, 13 Oct 2026 10:10:00 +0000HIGH 7.5: A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).https://patchthecve.com/cve/CVE-2024-34392.htmlhttps://patchthecve.com/cve/CVE-2024-34392.htmlWed, 17 Jun 2026 07:33:18 +0000HIGH 8.1: libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code exechttps://patchthecve.com/cve/CVE-2024-34391.htmlhttps://patchthecve.com/cve/CVE-2024-34391.htmlWed, 17 Jun 2026 07:33:18 +0000HIGH 8.1: libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64-bit systems), data leak, infinite loop