Login Request a demo
XM
Product
Xmldom
by Xmldom Project · last CVE Nov 2, 2022
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 0Medium 2Low 0
Severity
All severities4Critical2High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xmldom to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-39353
9.8
1%
Nov 2
xmldom allows multiple root nodes in a DOM
Affected: before 0.6.0; 0.7.0 before 0.7.7; 0.8.0 before 0.8.4; 0.9.0; 0.9.0; 0.9.0
CVE-2022-37616
9.8
2%
Oct 11
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable
Affected: through 0.6.0; 0.7.0 before 0.7.6; 0.8.0 before 0.8.3; 0.9.0
CVE-2021-32796
5.3
1%
Jul 27
xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Affected: before 0.7.0
CVE-2021-21366
4.3
1%
Mar 12
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Affected: before 0.5.0
Showing 4