{"id":"EUVD-2024-1690","enisaUuid":"1e87d70f-5fbd-3c52-af2c-7295b5c6858d","description":"libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64-bit systems), data leak, infinite loop and remote code execution (on 32-bit systems with the XML_PARSE_HUGE flag enabled).","datePublished":"May 2, 2024, 6:56:44 PM","dateUpdated":"Oct 3, 2026, 9:01:06 AM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://research.jfrog.com/vulnerabilities/libxmljs2-attrs-type-confusion-rce-jfsa-2024-001034097/\n","aliases":"CVE-2024-34393\nGHSA-mjr4-7xg5-pfvh\n","assigner":"JFROG","epss":0.96,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"8ee7b133-3d56-3a3d-8ca9-712638e1eb59","vulnerability":{"id":"GHSA-mjr4-7xg5-pfvh","description":"libxmljs2 type confusion vulnerability when parsing specially crafted XML","datePublished":"May 2, 2024, 9:30:29 PM","dateUpdated":"Nov 25, 2024, 7:27:49 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2024-34393\nhttps://github.com/marudor/libxmljs2/issues/204\nhttps://github.com/marudor/libxmljs2\nhttps://research.jfrog.com/vulnerabilities/libxmljs2-attrs-type-confusion-rce-jfsa-2024-001034097\n","enisa_id":"EUVD-2024-1690\n","aliases":"GHSA-mjr4-7xg5-pfvh\nCVE-2024-34393\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:56 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b936da5b-ef04-3674-9151-f00a9d74078f","vulnerability":{"id":"CVE-2024-34393","description":"libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both 32-bit systems and 64-bit systems), data leak, infinite loop and remote code execution (on 32-bit systems with the XML_PARSE_HUGE flag enabled).","datePublished":"May 2, 2024, 6:56:44 PM","dateUpdated":"Oct 3, 2026, 9:01:06 AM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://research.jfrog.com/vulnerabilities/libxmljs2-attrs-type-confusion-rce-jfsa-2024-001034097/\n","enisa_id":"EUVD-2024-1690\n","assigner":"JFROG","epss":0.96,"dataProcessed":"Oct 29, 2026, 7:19:11 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}