TI-2022-18728 CVE-2022-39353 · GHSA-crh6-fp67-6883
xmldom allows multiple root nodes in a DOM
Priority HIGH 81
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.
Vulnerabilities
4 records
TI-2022-17521 CVE-2022-37616
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom…
Priority MEDIUM 46
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable.
TI-2021-12462 CVE-2021-32796 · GHSA-5fg8-2547-mr8q
Misinterpretation of malicious XML input in xmldom
Priority LOW 32
xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
TI-2021-04465 CVE-2021-21366 · GHSA-h6q6-9hqw-rwfv
Misinterpretation of malicious XML input
Priority LOW 23
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.