252 matches found
CVE-2017-7038
CVE-2017-7038 Safari XSS CVE-2017-7038 https://support.apple.com/en-us/HT207923 Document implementation XSS vulnerability var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html';...
CLEANSTART-2024-AJ67044 DOMParser API did not properly process '<noscript>' elements for escaping
Security vulnerability affects the librewolf package. The DOMParser API did not properly process '' elements for escaping...
CLEANSTART-2024-YU37999 DOMParser API did not properly process '<noscript>' elements for escaping
Security vulnerability affects the firefox package. The DOMParser API did not properly process '' elements for escaping...
CLEANSTART-2024-KZ62911 out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations
Security vulnerability affects the firefox-esr package. An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations...
CLEANSTART-2026-FY85881 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-OS90350 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-ET86221 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-XH03813 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-LA96132 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module
Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CVE-2026-118244 Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print
Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chromium, the Trusted Types callback can throw while a...
CVE-2026-118244 Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print
Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chromium, the Trusted Types callback can throw while a...
CVE-2026-118244 Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print
Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chromium, the Trusted Types callback can throw while a...
CVE-2026-118244
The Highcharts JS charting library is vulnerable to a Cross-site Scripting (XSS) issue in versions 12.0.0 through 12.6.1 and 13.1.0 . The root cause is a fallback mechanism where the library assigns raw markup to innerHTML when DOMParser fails to return a document, bypassing the internal allow-li...
Highcharts cross-site scripting vulnerability
Highcharts versions 12.0.0 through 12.6.1 and 13.0.0 through 13.1.0 contain a cross-site scripting vulnerability. This occurs because when the DOMParser fails to return a document, Highcharts assigns raw markup to innerHTML prior to applying it to the allow list. As a result, during chart redrawi...
Astra Linux – Vulnerability in Firefox
The DOMParser API did not properly process '' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox versions earlier than 86...
CLEANSTART-2026-TN18132 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Security vulnerability affects the n8n package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-IC19536 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Security vulnerability affects the n8n package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-RE03719 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Security vulnerability affects the n8n package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-FD05711 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Security vulnerability affects the n8n package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...
CLEANSTART-2026-UU21916 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module
Security vulnerability affects the n8n package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...