Debian/node-xmldom: critical 9.8
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states "we a
Action: Upgrade node-xmldom to 0.8.3-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.3-1 | - |
Fixed versions
| 0.8.3-1 |
Sources
- osv: DEBIAN-CVE-2022-37616#Debian:13/node-xmldom
- https://security-tracker.debian.org/tracker/CVE-2022-37616
published · modified · JSON