npm/@xmldom/xmldom CVE-2021-32796: medium 6.5, EPSS 1.36%
Misinterpretation of malicious XML input
Action: Upgrade @xmldom/xmldom to 0.7.0 or later.
npm i @xmldom/xmldom@0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-5fg8-2547-mr8q#npm/@xmldom/xmldom
- https://github.com/xmldom/xmldom/security/advisories/GHSA-5fg8-2547-mr8q
- https://nvd.nist.gov/vuln/detail/CVE-2021-32796
- https://github.com/xmldom/xmldom/commit/7b4b743917a892d407356e055b296dcd6d107e8b
- https://github.com/xmldom/xmldom
- https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities
- https://mattermost.com/blog/securing-xml-implementations-across-the-web
- https://www.npmjs.com/package/@xmldom/xmldom
CVE-2021-32796 · published · modified · JSON