{"id":"GHSA-jv72-59wq-8rxm","revision":"e858671df3c3430da25a82fad425ccbe","records":[{"revision":"e858671df3c3430da25a82fad425ccbe","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-jv72-59wq-8rxm","aliases":["CVE-2025-25341"],"title":"libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)","description":"A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (DoS).","state":0,"publishedAt":"2025-12-26T15:30:17+00:00","modifiedAt":"2025-12-26T20:11:13.720754+00:00","affected":[{"ecosystem":"npm","name":"libxmljs","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"last_affected","version":"1.0.11"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-25341","https://github.com/libxmljs/libxmljs/issues/667","https://github.com/libxmljs/libxmljs"],"sourceUrl":"https://github.com/advisories/GHSA-jv72-59wq-8rxm","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-jv72-59wq-8rxm","identifiers":["GHSA-jv72-59wq-8rxm","CVE-2025-25341"]},"retained":false,"historicalAffected":[]}],"coverage":[]}