Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@xmldom/xmldom

npm

A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.

View on github.com · View on npmjs.org

Security Advisories for @xmldom/xmldom in npm

High
about 1 month ago

xmldom: Uncontrolled recursion in XML serialization leads to DoS GSA_kwCzR0hTQS0ydjM1LXc2aHEtNm1md84ABVpz

npm xmldom, @xmldom/xmldom
High
about 1 month ago

xmldom has XML injection through unvalidated DocumentType serialization GSA_kwCzR0hTQS1mNnd3LTNnZ3AtZnI4aM4ABVpy

npm xmldom, @xmldom/xmldom
High
about 1 month ago

xmldom has XML node injection through unvalidated processing instruction serialization GSA_kwCzR0hTQS14NndmLWYzcHgtd2NxeM4ABVpx

npm xmldom, @xmldom/xmldom
High
about 1 month ago

xmldom has XML node injection through unvalidated comment serialization GSA_kwCzR0hTQS1qNzU5LWo0NHctN2ZyOM4ABVpw

npm xmldom, @xmldom/xmldom
High
2 months ago

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion GSA_kwCzR0hTQS13aDRjLWozcjUtbWpocM4ABUh5

npm @xmldom/xmldom, xmldom
Critical
over 3 years ago

xmldom allows multiple root nodes in a DOM GSA_kwCzR0hTQS1jcmg2LWZwNjctNjg4M84AAvn0

npm @xmldom/xmldom, xmldom
Moderate
almost 5 years ago

Misinterpretation of malicious XML input MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVmZzgtMjU0Ny1tcjhx

npm @xmldom/xmldom, xmldom
Likely fork
Moderate
about 5 years ago

Misinterpretation of malicious XML input MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg2cTYtOWhxdy1yd2Z2

npm xmldom

Filter by Severity

High 5 Moderate 2 Critical 1