JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.
CVSS 3.1MEDIUM 5.6·Network·No auth·No interaction·EPSS 0.0139·Published 2021-02-16·Will not fix