HTML to DOM parser.
86%
Total Score
75
100
100
88
100
A prepare install-time script runs for the package, adding execution during installation; the available repository and provenance evidence reduce concern but do not remove the extra supply-chain surface.
All 5 recent commits came from one contributor, creating continuity risk; the non-archived repository, frequent releases, and recent merge activity provide partial compensation.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10188 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. html-dom-parser is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 5.0.0 - 5.1.7. | 5.0.0 - 5.1.7 | Low |
| Dependency | Last Release | Score |
|---|---|---|
domhandler Version 6.0.1 | — | — |
htmlparser2 Version 12.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.