xmldom vulnerabilities (TuxCare)
17 vulnerabilities.
-
xmldomTuxCare xmldom: Processing Instruction Target Injection Bypasses requireWellFormed 8.7 High -
xmldomTuxCare xmldom: Quadratic-memory consumption 8.7 High -
xmldomTuxCare xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge 8.7 High -
xmldomTuxCare xmldom: Quadratic-time attribute deduplication 8.7 High -
xmldomTuxCare xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content 6.9 Medium -
xmldomTuxCare xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization 6.3 Medium -
xmldomTuxCare xmldom: DocType `name` Injection Bypasses requireWellFormed 8.7 High -
xmldomTuxCare xmldom: Element name injection via createElement() bypasses requireWellFormed 8.7 High -
xmldomTuxCare xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed 8.7 High -
xmldomTuxCare xmldom: Denial of service via uncontrolled recursion in XML serialization 8.7 High -
xmldomTuxCare xmldom: XML injection through unvalidated DocumentType serialization 8.7 High -
xmldomTuxCare xmldom: XML node injection through unvalidated processing instruction serialization 8.7 High -
xmldomTuxCare xmldom: XML node injection through unvalidated comment serialization 8.7 High -
xmldomTuxCare xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion 7.5 High -
xmldomTuxCare xmldom allows multiple root nodes in a DOM 9.4 Critical -
xmldomTuxCare Misinterpretation of malicious XML input in xmldom 6.5 Medium -
xmldomTuxCare Misinterpretation of malicious XML input 4.3 Medium