Xmldom Project vulnerabilities
We track 1 vulnerability in Xmldom Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Xmldom Project vulnerabilities
- 9.8 Critical severity
Xmldom: Improperly Controlled Modification of Object Prototype Attributes
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states "we are in the process of marking this report as invalid"; howeve