The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total51,871
Mitigations16,938
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
8.7
25 minutes ago
xmldom<= 0.6.0
NPM: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
8.7
25 minutes ago
@xmldom/xmldom0.9.11
NPM: xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator
8.7
26 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: DocType `name` Injection Bypasses requireWellFormed
8.7
26 minutes ago
xmldom<= 0.6.0
NPM: xmldom: DocType `name` Injection Bypasses requireWellFormed
8.7
26 minutes ago
@xmldom/xmldom>= 0.9.0, <= 0.9.11
NPM: xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path
8.7
26 minutes ago
@xmldom/xmldom>= 0.9.10, <= 0.9.11
NPM: xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator
8.7
26 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
6.9
27 minutes ago
xmldom<= 0.6.0
NPM: xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
6.9
27 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: Quadratic-time attribute deduplication
8.7
27 minutes ago
xmldom<= 0.6.0
NPM: xmldom: Quadratic-time attribute deduplication
8.7
27 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
8.7
28 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: Quadratic-memory consumption
8.7
28 minutes ago
xmldom>= 0.1.5, <= 0.6.0
NPM: xmldom: Quadratic-memory consumption
8.7
28 minutes ago
@xmldom/xmldom>= 0.7.0, <= 0.8.14
NPM: xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
8.7
28 minutes ago
xmldom>= 0.3.0, <= 0.6.0
NPM: xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
8.7
28 minutes ago
@xmldom/xmldom>= 0.9.0-beta.1, <= 0.9.11
NPM: xmldom: HTML raw-text closing-tag case mismatch causes output amplification
8.7
29 minutes ago
joi>= 17.2.0, < 17.13.6
NPM: joi: Prototype pollution via a `__proto__` language key in custom messages
3.7
33 minutes ago
@hapi/joi>= 16.0.0, <= 17.1.1
NPM: joi: Prototype pollution via a `__proto__` language key in custom messages
3.7
33 minutes ago
colord< 2.9.4
NPM: Colord: Slow rejection of oversized malformed color strings
6.9
37 minutes ago