TI-2022-18728 CVE-2022-39353 · GHSA-crh6-fp67-6883
xmldom allows multiple root nodes in a DOM
Priority HIGH 81
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.
xmldom
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
xmldom records in CISA KEVNo xmldom vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Xmldom · all components
TI-2022-17521 CVE-2022-37616
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom…
Priority MEDIUM 46
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable.
TI-2021-12462 CVE-2021-32796 · GHSA-5fg8-2547-mr8q
Misinterpretation of malicious XML input in xmldom
Priority LOW 32
xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
TI-2021-04465 CVE-2021-21366 · GHSA-h6q6-9hqw-rwfv
Misinterpretation of malicious XML input
Priority LOW 23
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.