xmldom
A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.
70%
Total Score
caution
Usable with caveats: the published release is five years old despite an active, well-supported repository.
Health Score Breakdown
The registry has had no release in the last 12 months, and version 0.6.0 was published about five years ago. Active repository work partly compensates, but the artifact itself is stale.
The published artifact has no TypeScript declarations, which is a consumer-ergonomics gap for a JavaScript library that documents TypeScript and ES6 usage.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-34601 xmldom is vulnerable to XML Injection (aka Blind XPath Injection) in versions 0.0.0 - 0.6.0. | 0.0.0 - 0.6.0 | High |
CVE-2022-39353 xmldom is vulnerable to Improper Input Validation in versions 0.0.0 - 0.6.0. | 0.0.0 - 0.6.0 | Critical |
CVE-2022-37616 xmldom is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in versions 0.0.0 - 0.6.0. | 0.0.0 - 0.6.0 | Critical |
CVE-2021-32796 xmldom is vulnerable to Improper Encoding or Escaping of Output in versions 0.0.0 - 0.6.0. | 0.0.0 - 0.6.0 | Medium |
CVE-2021-21366 xmldom is vulnerable to Misinterpretation of Input in versions 0.0.0 - 0.5.0. | 0.0.0 - 0.5.0 | Medium |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 14 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.