Lucene search
GoogleOSV:CVE-2021-21366HistoryMar 12, 2021 - 5:15 p.m.
CVE-2021-21366
2021-03-1217:15:12
Google
osv.dev
10
xmldom
javascript
xml processing
xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed in version 0.5.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.
Related
github
github
Misinterpretation of malicious XML input
2021-03-12 22:39:39
nodejs
nodejs
Misinterpretation of malicious XML input
2021-03-12 22:42:38
nvd
nvd
CVE-2021-21366
2021-03-12 17:15:12
cvelist
cvelist
CVE-2021-21366 Misinterpretation of malicious XML input
2021-03-12 00:00:00
osv
osv
Misinterpretation of malicious XML input
2021-03-12 22:39:39
node-xmldom - security update
2023-01-01 00:00:00
node-xmldom vulnerabilities
2023-05-24 09:57:50
prion
prion
Input validation
2021-03-12 17:15:00
veracode
veracode
Misinterpretation Of Malicious XML Input
2021-03-10 07:22:41
redhatcve
redhatcve
CVE-2021-21366
2023-05-29 18:40:08
debiancve
debiancve
CVE-2021-21366
2021-03-12 17:15:12
cve
cve
CVE-2021-21366
2021-03-12 17:15:12
ubuntucve
ubuntucve
CVE-2021-21366
2021-03-12 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Automation Manager
2023-05-15 12:07:40
nessus
nessus
Debian DLA-3260-1 : node-xmldom - LTS security update
2023-01-07 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : xmldom vulnerabilities (USN-6102-1)
2023-05-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6102-1)
2023-05-25 00:00:00
Debian: Security Advisory (DLA-3260-1)
2023-01-02 00:00:00
ubuntu
ubuntu
xmldom vulnerabilities
2023-05-24 00:00:00
debian
debian
[SECURITY] [DLA 3260-1] node-xmldom security update
2023-01-01 17:00:48