Skip to content
OpenAdvisories
Critical DLA-3260-1 2 CVEs

node-xmldom - security update

Published Jan 1, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 node-xmldom 0.1.27+ds-1+deb10u2

Vulnerabilities 2

  • Critical 9.4
    CVE-2022-39353

    xmldom allows multiple root nodes in a DOM

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of …

    xmldom xmldom python-tensorboard node-xmldom Debian Ubuntu Azure Linux npm
  • Medium 4.3
    CVE-2021-21366

    Misinterpretation of malicious XML input

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously craf…

    xmldom xmldom node-xmldom node-xmldom Debian Ubuntu npm