775 matches found
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83608 via @xmldom/xmldom (>=0.7.0, <=0.8.14)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83608 Source advisory: SNYK:JS-XMLDOMXMLDOM-19498556...
XML Injection
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection vi...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1091 more potentially affected by CVE-2026-83609 via @xmldom/xmldom (>=0.9.0, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83609 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499073...
XML Injection
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection vi...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1093 more potentially affected by CVE-2026-83614 via @xmldom/xmldom (>=0.9.0-beta.8, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0-beta.8, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83614 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499076...
Allocation of Resources Without Limits or Throttling
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Allocation of...
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83614 via @xmldom/xmldom (>=0.7.0, <=0.8.14)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83614 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499076...
Improper Handling of Case Sensitivity
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Improper Handlin...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1093 more potentially affected by CVE-2026-83612 via @xmldom/xmldom (>=0.9.0-beta.8, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0-beta.8, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83612 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499086...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1093 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.9.0-beta.8, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0-beta.8, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...
Inefficient Algorithmic Complexity
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Inefficient...
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83613 via @xmldom/xmldom (>=0.7.0, <=0.8.14)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83613 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499072...
@bendyline/docblocks-cli (>=2.4.0, <=2.5.0), @bendyline/docblocks-react (>=2.4.0, <=2.5.0) +14 more potentially affected by CVE-2026-83617 via @xmldom/xmldom (0.9.11)
@xmldom/xmldom NPM version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on @xmldom/xmldom and may be impacted: - @bendyline/docblocks-cli =2.4.0, =2.4.0, =1.0.4, =1.0.4, =2.5.5, =2.7.3, =2.4.4, =1.0.2, =0.9.1, =0.9.1, =0.4.1, =0.0.14, =0.0.45 an...
XML Injection
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection vi...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1093 more potentially affected by CVE-2026-83616 via @xmldom/xmldom (>=0.9.0-beta.8, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0-beta.8, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83616 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499070...
XML Injection
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection in...
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83616 via @xmldom/xmldom (>=0.7.0, <=0.8.14)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83616 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499070...
2c2p-integration (>=0.2.0, <=0.2.2), 4help-shared (>=1.0.8, <=1.0.15) +4413 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.7.0, <=0.8.14)
@xmldom/xmldom NPM version =0.7.0, =0.2.0, =1.0.8, =0.1.3, =0.0.7, =0.3.31, =1.0.4, =1.0.0, =2.1.0-develop-2ff6c7-mckmjkzz, =0.12.0, =0.0.1, =0.0.2 and more Source cves: CVE-2026-83615 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499069...
Allocation of Resources Without Limits or Throttling
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Allocation of...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1093 more potentially affected by CVE-2026-83615 via @xmldom/xmldom (>=0.9.0-beta.8, <=0.9.11)
@xmldom/xmldom NPM version =0.9.0-beta.8, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =2.0.2, =0.8.1, =0.1.0, =0.8.0, =0.1.0, =0.2.2 and more Source cves: CVE-2026-83615 Source advisory: SNYK:JS-XMLDOMXMLDOM-19499069...