Xmldom Project Xmldom — known CVE vulnerabilities

Every CVE whose affected-product data names Xmldom Project Xmldom, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-37616 — CVSS 9.8 (critical): A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3…
• CVE-2022-39353 — CVSS 9.4 (critical): xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not…
• CVE-2021-32796 — CVSS 6.5 (medium): xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions…
• CVE-2021-21366 — CVSS 4.3 (medium): xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older…