CVE-2024-34394: Marudor LIBXMLJS2

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. This vulnerability can lead to denial of service and remote code execution.

Affected products

• Marudor LIBXMLJS2: any version

Published 2024-05-02. Last modified 2026-10-03.