xmldom vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-41673High@xmldom/xmldom: xmldom: Uncontrolled recursion in XML serialization leads to DoS CVE-2026-41674High@xmldom/xmldom: xmldom has XML injection through unvalidated DocumentType serialization CVE-2026-41675High@xmldom/xmldom: xmldom has XML node injection through unvalidated processing instruction serialization CVE-2026-41672High@xmldom/xmldom: xmldom has XML node injection through unvalidated comment serialization CVE-2026-34601Highxmldom: xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion CVE-2022-39353Criticalxmldom: xmldom allows multiple root nodes in a DOM CVE-2021-32796Mediumxmldom: Misinterpretation of malicious XML input CVE-2021-21366Mediumxmldom: Misinterpretation of malicious XML input

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo