{"id":"EUVD-2024-1484","enisaUuid":"cd487218-23af-3d8c-9f98-e80cd23c8406","description":"libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.","datePublished":"May 2, 2024, 6:57:35 PM","dateUpdated":"Oct 3, 2026, 9:02:47 AM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://research.jfrog.com/vulnerabilities/libxmljs2-namespaces-type-confusion-rce-jfsa-2024-001034098/\nhttps://github.com/marudor/libxmljs2/issues/205\n","aliases":"CVE-2024-34394\nGHSA-78h3-pg4x-j8cv\n","assigner":"JFROG","epss":0.99,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"186221a1-4d7e-3dde-b2eb-cbe9ebc4ec4a","vulnerability":{"id":"GHSA-78h3-pg4x-j8cv","description":"libxmljs2 vulnerable to type confusion when parsing specially crafted XML","datePublished":"May 2, 2024, 9:30:29 PM","dateUpdated":"Nov 25, 2024, 7:28:05 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2024-34394\nhttps://github.com/marudor/libxmljs2/issues/205\nhttps://github.com/marudor/libxmljs2\nhttps://research.jfrog.com/vulnerabilities/libxmljs2-namespaces-type-confusion-rce-jfsa-2024-001034098\n","enisa_id":"EUVD-2024-1484\n","aliases":"GHSA-78h3-pg4x-j8cv\nCVE-2024-34394\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:56 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b6f7179e-d20d-377f-8235-b7280b044811","vulnerability":{"id":"CVE-2024-34394","description":"libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.","datePublished":"May 2, 2024, 6:57:35 PM","dateUpdated":"Oct 3, 2026, 9:02:47 AM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://research.jfrog.com/vulnerabilities/libxmljs2-namespaces-type-confusion-rce-jfsa-2024-001034098/\nhttps://github.com/marudor/libxmljs2/issues/205\n","enisa_id":"EUVD-2024-1484\n","assigner":"JFROG","epss":0.99,"dataProcessed":"Oct 31, 2026, 7:19:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}