{"id":"EUVD-2025-205443","enisaUuid":"263fc52b-9a9b-352d-8e8a-7ceb57c488ae","description":"A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).","datePublished":"Dec 26, 2025, 12:00:00 AM","dateUpdated":"Dec 26, 2025, 4:30:16 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/libxmljs/libxmljs/issues/667\n","aliases":"CVE-2025-25341\nGHSA-jv72-59wq-8rxm\n","assigner":"mitre","epss":0.42,"enisaIdProduct":[{"id":"e1a91b28-c0ff-3aae-af9f-3495e85800c7","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"0e604ebf-7339-363c-b439-25f373dd6109","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"37851697-8be5-30db-b41e-7d8e40eeb984","vulnerability":{"id":"CVE-2025-25341","description":"A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).","datePublished":"Dec 26, 2025, 12:00:00 AM","dateUpdated":"Dec 26, 2025, 4:30:16 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/libxmljs/libxmljs/issues/667\n","enisa_id":"EUVD-2025-205443\n","assigner":"mitre","epss":0.42,"dataProcessed":"Oct 29, 2026, 7:16:32 AM","vulnerabilityProduct":[{"id":"f93a0d4a-01e9-3c9a-a6af-ca66768f499a","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"f9d080ab-8b7d-301c-bbe0-db818c66f39c","vendor":{"name":"n/a"}}]}},{"id":"7e9a176d-90a7-3306-bdc4-2578e89062a7","vulnerability":{"id":"GHSA-jv72-59wq-8rxm","description":"libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)","datePublished":"Dec 26, 2025, 3:30:17 PM","dateUpdated":"Dec 26, 2025, 7:47:33 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-25341\nhttps://github.com/libxmljs/libxmljs/issues/667\nhttps://github.com/libxmljs/libxmljs\n","enisa_id":"EUVD-2025-205443\n","aliases":"CVE-2025-25341\nGHSA-jv72-59wq-8rxm\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}