Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-21366HistoryMar 12, 2021 - 5:15 p.m.
CVE-2021-21366
2021-03-1217:15:12
Debian Security Bug Tracker
security-tracker.debian.org
13
0.003 Low
EPSS
Percentile
69.5%
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed in version 0.5.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | node-xmldom | < 0.5.0-1 | node-xmldom_0.5.0-1_all.deb |
| Debian | 11 | all | node-xmldom | < 0.5.0-1 | node-xmldom_0.5.0-1_all.deb |
| Debian | 10 | all | node-xmldom | < 0.1.27+ds-1+deb10u2 | node-xmldom_0.1.27+ds-1+deb10u2_all.deb |
| Debian | 999 | all | node-xmldom | < 0.5.0-1 | node-xmldom_0.5.0-1_all.deb |
| Debian | 13 | all | node-xmldom | < 0.5.0-1 | node-xmldom_0.5.0-1_all.deb |
Related
osv
osv
CVE-2021-21366
2021-03-12 17:15:12
Misinterpretation of malicious XML input
2021-03-12 22:39:39
node-xmldom - security update
2023-01-01 00:00:00
github
github
Misinterpretation of malicious XML input
2021-03-12 22:39:39
nodejs
nodejs
Misinterpretation of malicious XML input
2021-03-12 22:42:38
cvelist
cvelist
CVE-2021-21366 Misinterpretation of malicious XML input
2021-03-12 00:00:00
ubuntucve
ubuntucve
CVE-2021-21366
2021-03-12 00:00:00
prion
prion
Input validation
2021-03-12 17:15:00
veracode
veracode
Misinterpretation Of Malicious XML Input
2021-03-10 07:22:41
cve
cve
CVE-2021-21366
2021-03-12 17:15:12
redhatcve
redhatcve
CVE-2021-21366
2023-05-29 18:40:08
ibm
ibm
Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Automation Manager
2023-05-15 12:07:40
nessus
nessus
Debian DLA-3260-1 : node-xmldom - LTS security update
2023-01-07 00:00:00
ubuntu
ubuntu
xmldom vulnerabilities
2023-05-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3260-1)
2023-01-02 00:00:00
Ubuntu: Security Advisory (USN-6102-1)
2023-05-25 00:00:00