xmldom — Vulnerabilities & Security Advisories 23

This page aggregates security vulnerabilities associated with the xmldom library, a JavaScript XML DOM implementation. The collection encompasses various weakness types, including denial of service, code injection, and improper input validation, covering reported issues from the library's initial release through recent updates. Readers can utilize this resource to track vendor advisories, understand specific weakness classes within XML parsing contexts, and review the complete vulnerability history of this product. The data is organized to facilitate analysis of recurring patterns, such as prototype pollution or entity expansion attacks, which have historically affected XML processing libraries. By examining the aggregated records, developers and security professionals can assess risk exposure for applications relying on xmldom and identify necessary mitigation strategies. The entries reflect a range of severity levels, from low-impact information disclosures to critical remote code execution flaws, providing a comprehensive view of the library's security posture over time. This aggregation serves as a reference point for understanding how vulnerabilities in XML parsing libraries evolve and are addressed by the maintainers.